5 ms·
I recently made use of my right to access personal information from someone who had sent me unsolicited marketing material. The person who fulfilled my request
by Rygian 5y ago
I recently made use of my right to access personal information from someone who had sent me unsolicited marketing material.
The person who fulfilled my request sent me a PDF copy of their full customer list, where all entries had been blacked out except mine.
As you may anticipate, that blacking out was simply a black box drawn on top of the actual data. It took me all of 3 seconds to select all, copy, then paste in a word processor to confirm that the file contained personal data from hundreds of other individuals.
- danuker 5y agoCongrats! You now have a data leak to report to the GDPR authority of your state, in addition to the unsolicited marketing.
- thrashh 5y agoAbout 10 years ago or something, someone in the US government made this mistake and it was all over the news. That’s when a redaction tool suddenly appeared in Adobe Acrobat.
- rzzzt 5y agoI thought at that point they started to print out the redacted versions and scanned them again.