5 ms·

Actually, another problem might be GDPR: I have found my username... and that is a clearly a PII because it's directly and univocally bound to me I dont really

Actually, another problem might be GDPR: I have found my username... and that is a clearly a PII because it's directly and univocally bound to me I dont really care (for now) about this... but on the principle, I'm a bit fed up too by companies just crawling anything to train anymodel without any care about the datas, the people that produced them, and the consequences on people's life. Maybe I could use the new European AI Act too (https://artificialintelligenceact.eu/fr/high-level-summary/ https://artificialintelligenceact.eu/fr/high-level-summary/) ... although I'm not sure because I didn't read it yet

shadowgovt 2y ago
I look forward to the not-too-distant future where the EU protections grow stronger and places like HN have to respond by banning all European users lest they run afoul of a draconic legal framework. It'll kill a lot of experiments (Mastodon immediately comes to mind; can't be pulling comments from other people's servers if those comments are attached to personal data like the commenter's username, right?).
- olivierduval 2y ago
  Well, maybe you should think about the real responsabilities: Europe make laws in reaction to ABUSES. So dont blame Europe for the legislation, but the abusers that made this legislation mandatory to defend european citizen ;-) Actually, Europe is so slow that a lot of experiments may take place. And there wont be any legislation if there no abuse... It took a loooonnnng time for Europe to react to Facebook, Google & co abuse with users datas. Same for OpenAI using a awful lot of copyrighted material without giving anything back... So thank'em for Europe legislation :-)
averageRoyalty 2y ago
I'm not up on the nuance of the GDPR, but has it been tested that your public profile name - which you set knowing it will be displayed publicly - is PII? I'd be very surprised if that were the case.
- shadowgovt 2y ago
  It's not PII (an American term) but it is personal data (a GDPR term). Personal data is (broadly) considered to be data that could be used to track or tie your behavior online together into a profile. The UK's ICO calls out usernames specifically as an example of such data. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/personal-information-what-is-it/what-is-personal-data/what-are-identifiers-and-related-factors/#:~:text=The%20username%20is%20personal%20data,'real%20world'%20named%20individual https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re.... (For those of us who have been around on the Internet long enough to remember the era where people intentionally chose handles to remain pseudonymous and separate from their IRL personas, this seems counter-intuitive and a little preposterous, but the GDPR doesn't care what "netizens" think about privacy; it's a broad attempt to impose a "non-native" concept of privacy over the preexisting net culture).
- olivierduval 2y ago
  Well, you choose a username in a specific context, even if it's public. For example, you may agree to have your linkedIn profile name next to your HN username... maybe. But I'm not sure that you would agree to have your LinkedIn profile name next to your Tinder username. And you sure don't want that to happen without your agreement and even without you knowing about it (but learning about it from a colleague for example). That's why GDPR has some right to deletion or modification. And why some days, Europe may go after data brocker (as a side note: not sure why my comments were downvoted. I didn't say that I would go after anybody - and surely not HN - I only said that uncontrolled use of any data without any anonymization and without consent might be the source of problems with regard to legislation decided BECAUSE too many shady business abused of it. You may not like it but then... well... downvote the abusers)

shadowgovt 2y ago

I look forward to the not-too-distant future where the EU protections grow stronger and places like HN have to respond by banning all European users lest they run afoul of a draconic legal framework. It'll kill a lot of experiments (Mastodon immediately comes to mind; can't be pulling comments from other people's servers if those comments are attached to personal data like the commenter's username, right?).

olivierduval 2y ago
Well, maybe you should think about the real responsabilities: Europe make laws in reaction to ABUSES. So dont blame Europe for the legislation, but the abusers that made this legislation mandatory to defend european citizen ;-) Actually, Europe is so slow that a lot of experiments may take place. And there wont be any legislation if there no abuse... It took a loooonnnng time for Europe to react to Facebook, Google & co abuse with users datas. Same for OpenAI using a awful lot of copyrighted material without giving anything back... So thank'em for Europe legislation :-)

averageRoyalty 2y ago

I'm not up on the nuance of the GDPR, but has it been tested that your public profile name - which you set knowing it will be displayed publicly - is PII? I'd be very surprised if that were the case.

shadowgovt 2y ago
It's not PII (an American term) but it is personal data (a GDPR term). Personal data is (broadly) considered to be data that could be used to track or tie your behavior online together into a profile. The UK's ICO calls out usernames specifically as an example of such data. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/personal-information-what-is-it/what-is-personal-data/what-are-identifiers-and-related-factors/#:~:text=The%20username%20is%20personal%20data,'real%20world'%20named%20individual https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re.... (For those of us who have been around on the Internet long enough to remember the era where people intentionally chose handles to remain pseudonymous and separate from their IRL personas, this seems counter-intuitive and a little preposterous, but the GDPR doesn't care what "netizens" think about privacy; it's a broad attempt to impose a "non-native" concept of privacy over the preexisting net culture).
olivierduval 2y ago
Well, you choose a username in a specific context, even if it's public. For example, you may agree to have your linkedIn profile name next to your HN username... maybe. But I'm not sure that you would agree to have your LinkedIn profile name next to your Tinder username. And you sure don't want that to happen without your agreement and even without you knowing about it (but learning about it from a colleague for example). That's why GDPR has some right to deletion or modification. And why some days, Europe may go after data brocker (as a side note: not sure why my comments were downvoted. I didn't say that I would go after anybody - and surely not HN - I only said that uncontrolled use of any data without any anonymization and without consent might be the source of problems with regard to legislation decided BECAUSE too many shady business abused of it. You may not like it but then... well... downvote the abusers)