3 ms·
Under GDPR, if you request that a company deletes the PII they have on you, the company has the obligation to request deletion to any third parties they transfe
by boudin 3y ago
Under GDPR, if you request that a company deletes the PII they have on you, the company has the obligation to request deletion to any third parties they transferred the data to.
One requirement that is less known is also that, if a company has PII about you and you never explicitly gave this data to them, you then have the right to be informed. What it means is that you can ask what data they hold on you and what is the source of the data.
So if you get a cold call from a random sales person, you can ask them where they got your number, they have the obligation to tell you the data broker they bought it from. You can then request the deletion of your data from the data broker.
I did it a few times.
- wkat4242 3y agoYeah but not "all brokers" without having to figure out who they even are. There's a huge forest of data brokers behind the big actors. California has that. But asking the people who they got the data from doesn't work. They just hang up as soon as you talk about it. Especially because I'm on the "do not call me" register and they are already in breach of the law by calling me in the first place.
- boudin 3y agoIt's going to be the same in California for companies who just ignore the regulation though. I do agree with you that a centralised way to get your data to be deleted is great. It does feel like a band-aid to me though, I would just prefer that reselling PII would be made illegal. I don't see the point of allowing that.
- Jensson 3y ago> Yeah but not "all brokers" without having to figure out who they even are Brokers aren't allowed to store your data in the first place without your consent in EU. This button is an opt out, EU is opt in.