5 ms·

A class action lawsuit because you don't like the way that a private company, one that you are not forced to use, has designed functionality? Bit of a stretch.

A class action lawsuit because you don't like the way that a private company, one that you are not forced to use, has designed functionality? Bit of a stretch...

wizzwizz4 4y ago
GDPR Article 5, 1(b): > Personal data shall be: […] collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’);
- thayne 4y ago
  So it would have to come from someone in the EU.
  - insanitybit 4y ago
    The GDPR applies in the US but I do think that PayPal is likely only using US numbers for this "feature" because the EU is much more aggressive about protecting users.
    - wizzwizz4 4y ago
      The GDPR actually only applies in the EU. You're probably thinking of the CCPA which applies worldwide.
      - insanitybit 4y ago
        Ah, yeah you're right, I got jumbled.
      - zeeZ 4y ago
        The GDPR applies to: 1. a company or entity which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or 2. a company established outside the EU and is offering goods/services (paid or for free) or is monitoring the behaviour of individuals in the EU.
        wizzwizz4 4y ago
        Yup! Something needs to be in the EU for the law to apply. It (sadly, imo) doesn't apply to EU citizens resident in, say, Texas.
insanitybit 4y ago
I agree, it is a bit of a stretch. Just brainstorming, not a lawyer. I think you'd have to either make a GDPR case or otherwise get a bunch of users together who have been targeted / attacked and make a case for PayPal not meeting their obligation to protect users/ making users think they are safer than they are (because they offer 2FA but it can be bypassed).

A class action lawsuit because you don't like the way that a private company, one that you are not forced to use, has designed functionality? Bit of a stretch...

wizzwizz4 4y ago

GDPR Article 5, 1(b): > Personal data shall be: […] collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’);

thayne 4y ago
So it would have to come from someone in the EU.
- insanitybit 4y ago
  The GDPR applies in the US but I do think that PayPal is likely only using US numbers for this "feature" because the EU is much more aggressive about protecting users.
  - wizzwizz4 4y ago
    The GDPR actually only applies in the EU. You're probably thinking of the CCPA which applies worldwide.
    - insanitybit 4y ago
      Ah, yeah you're right, I got jumbled.
    - zeeZ 4y ago
      The GDPR applies to: 1. a company or entity which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or 2. a company established outside the EU and is offering goods/services (paid or for free) or is monitoring the behaviour of individuals in the EU.
      - wizzwizz4 4y ago
        Yup! Something needs to be in the EU for the law to apply. It (sadly, imo) doesn't apply to EU citizens resident in, say, Texas.

insanitybit 4y ago

I agree, it is a bit of a stretch. Just brainstorming, not a lawyer. I think you'd have to either make a GDPR case or otherwise get a bunch of users together who have been targeted / attacked and make a case for PayPal not meeting their obligation to protect users/ making users think they are safer than they are (because they offer 2FA but it can be bypassed).