4 ms·
"Legitimate interest" is the universal GDPR loophole. This one needs to be closed asap.
by PeterStuer 3y ago
"Legitimate interest" is the universal GDPR loophole. This one needs to be closed asap.
- Too 3y agoAlong with the dark patterns of “confirm my choices”, where my “choices” are an endless list of checkboxes hidden under expandable sections of complete gibberish.
- rightbyte 3y agoUsually one button in the end is some vaguely stated "accept all spying" too that sounds like you don't accept. E.g. "Accept all choices" or whatever.
- troupo 3y agoThose dark patterns are not GDPR-compliant. GDPR says, "it should be as easy to say yes as it is to say know" and on top of that those huge lists do not present informed consent. NOYB has a bit on that: https://noyb.eu/en/where-did-all-reject-buttons-come https://noyb.eu/en/where-did-all-reject-buttons-come
- LelouBil 3y agoThis is easily fined for non compliance, however the process is currently very slow but it depends on the country you signal it.
- mrweasel 3y agoI still don't understand what legitimate interest even means.
- BlackFly 3y agoI think the preamble to the legislation sort of goes over it. I remember a section talking about marketing and it seemed to imply that businesses have a legitimate interest to market their own products to their own customers. For example, a Dutch company might look at address data and see that they get a lot of orders online to ship to Germany and they can use that to open a store there. Obviously the business is interested in selling to its consumers effectively and obviously those consumers are interested in those products. When they start selling that information to other people, it isn't really legitimate anymore.
- denton-scratch 3y agoHmmm. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/legitimate-interests/what-is-the-legitimate-interests-basis/ https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re... Until I read that, I held the belief that GDPR was really pretty clear and easy to implement. But reading that, it seems to me that the ICO doesn't really have a clue how you're supposed to distinguish a legitimate interest from an illegitimate one. Perhaps the "legitimate interest" base needs to be deleted. It looks like a deliberate loophole.
- midasuni 3y agoThe main one is it’s not enforced.
- cccbbbaaa 3y agoIt's a loophole because enforcement is a joke, but I would agree to say the basis is too vague to be useful.