4 ms·

> "sharing access to customers’ location information without consent..." I'm not seeing anything here preventing the carriers from just adding "sharing locatio

> "sharing access to customers’ location information without consent..." I'm not seeing anything here preventing the carriers from just adding "sharing location data" to the EULA / privacy policy that no one reads and continuing on - now with "consent". Without a requirement to offer a separate opt-out, this just seems like a temporary road bump that changes nothing in the long run.

hypothesis 3y ago
Does carrier even have to do anything when say your bank inserts consent language for location data into credit card application? They might or might not qualify that with “for fraud prevention and/or other purposes”. Same for insurance carriers… I saw such clauses and I’m sure it was about pulling data from your phone carrier.
laweijfmvo 3y ago
I would like to see laws addressing the issue itself, e.g. banning any collection of location data unless it's explicitly needed and used by the collecting agent/service themselves, and banning sharing/selling it.
- genocidicbunny 3y ago
  Require companies that store that kind of data to carry insurance that can make anyone damaged by the data collection (and leaks of said data) whole. And the 'make whole' amount definitely needs to be individually defined. You shouldn't get away with paying a little fine of a couple thousand USD if your data leak causes me millions in damages; In that case, you owe me those millions back.
gruez 3y ago
This is covered in the longer version of the document: https://docs.fcc.gov/public/attachments/FCC-24-41A1.pdf https://docs.fcc.gov/public/attachments/FCC-24-41A1.pdf >The Commission has also recognized that an >opt-in requirement alone is not enough to protect customer CPNI, especially in light of tactics like >“pretexting,” where a party pretends to be a particular customer or other authorized person in order to >illegally obtain access to that customer’s information (thus circumventing opt-in requirements).17

hypothesis 3y ago

Does carrier even have to do anything when say your bank inserts consent language for location data into credit card application? They might or might not qualify that with “for fraud prevention and/or other purposes”. Same for insurance carriers… I saw such clauses and I’m sure it was about pulling data from your phone carrier.

laweijfmvo 3y ago

I would like to see laws addressing the issue itself, e.g. banning any collection of location data unless it's explicitly needed and used by the collecting agent/service themselves, and banning sharing/selling it.

genocidicbunny 3y ago
Require companies that store that kind of data to carry insurance that can make anyone damaged by the data collection (and leaks of said data) whole. And the 'make whole' amount definitely needs to be individually defined. You shouldn't get away with paying a little fine of a couple thousand USD if your data leak causes me millions in damages; In that case, you owe me those millions back.

gruez 3y ago

This is covered in the longer version of the document: https://docs.fcc.gov/public/attachments/FCC-24-41A1.pdf https://docs.fcc.gov/public/attachments/FCC-24-41A1.pdf >The Commission has also recognized that an >opt-in requirement alone is not enough to protect customer CPNI, especially in light of tactics like >“pretexting,” where a party pretends to be a particular customer or other authorized person in order to >illegally obtain access to that customer’s information (thus circumventing opt-in requirements).17