3 ms·

Opt-out is simply a violation of the EU GDPR. For me as an EU citizen it was checked after the update. I hope the data protection agencies have the capacity to

Opt-out is simply a violation of the EU GDPR. For me as an EU citizen it was checked after the update. I hope the data protection agencies have the capacity to punish this behavior, sadly a lot of bad actors still get away because there aren’t enough resources.

rawling 2y ago
Per Mozilla > The technology aims to demonstrate a way for advertisers to measure overall ad effectiveness without gathering information about specific individuals. If it doesn't collect personal data, does it fall under GDPR?
- d1sxeyes 2y ago
  No. But the bar for “personal data” is very low, and any data that could conceivably be linked to an individual is personal data. I’m not familiar with how this function works, but Mozilla would almost certainly have to work quite hard to avoid falling foul of this: > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- ManBeardPc 2y ago
  It contains data about which ads you saw or clicked on as a histogram. GDPR defines personal data as follows: > The basic definition of personal data is any information relating to an identified or identifiable natural person (data subject). This data is then aggregated using their DAP service. This means to a third party. They say it's somehow encrypted and will be fully anonymized, but I can't fully understand the implementation. There are several security considerations mentioned in the draft: https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/ https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/. Doesn't matter that much, they have to ask for consent and inform the user in clear and understandable language anyway. Opt-out is a big no-no.

rawling 2y ago

Per Mozilla > The technology aims to demonstrate a way for advertisers to measure overall ad effectiveness without gathering information about specific individuals. If it doesn't collect personal data, does it fall under GDPR?

d1sxeyes 2y ago
No. But the bar for “personal data” is very low, and any data that could conceivably be linked to an individual is personal data. I’m not familiar with how this function works, but Mozilla would almost certainly have to work quite hard to avoid falling foul of this: > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
ManBeardPc 2y ago
It contains data about which ads you saw or clicked on as a histogram. GDPR defines personal data as follows: > The basic definition of personal data is any information relating to an identified or identifiable natural person (data subject). This data is then aggregated using their DAP service. This means to a third party. They say it's somehow encrypted and will be fully anonymized, but I can't fully understand the implementation. There are several security considerations mentioned in the draft: https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/ https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/. Doesn't matter that much, they have to ask for consent and inform the user in clear and understandable language anyway. Opt-out is a big no-no.