4 ms·
> No current employee of a corporation can promise that data collected today will not in the future be used for any particular purpose. Yes they can, because d
by astrange 11mo ago
> No current employee of a corporation can promise that data collected today will not in the future be used for any particular purpose.
Yes they can, because data privacy laws forbid collecting data for one purpose and then using it for new ones without notice or consent.
- jzb 11mo agoThis means that, possibly, I can sue if my data is misused: it does not prevent its misuse. It doesn’t offer any protection if the law changes, or any real protection against constant TOS changes, etc.
- o11c 11mo agoThat would be meaningful if there were ever any enforcement.
- astrange 11mo agohttps://cppa.ca.gov/announcements/ https://cppa.ca.gov/announcements/ And of course the EU does nothing but fine tech companies bazillions of euros for GDPR violations.
- TylerE 11mo agoIf they keep having to do it the fines are obviously not high enough.
- astrange 11mo agoHaving to do it? Why would they want to stop?
- TylerE 11mo agoThe entire point of laws and fines is to get bad actors to NOT DO THE THING IN THE FIRST PLACE. That is literally the entire point of the exercise.
- astrange 11mo agoThe point of the EU's tech laws is to find American companies violating them so they can charge them big fines. They're not going to be satisfied, they just want to fine them. This is called protectionism. But it does lead to privacy protections. (This is similar to how Americans have a religious belief that "regulations are written in blood" and so think it's immoral to ever undo any safety regulation; as a result their building code bans anything anyone has ever thought was bad with not a moment spared for cost-benefit analysis.)
- piva00 11mo agoThe fines keep increasing for repeated violators, up to 4% of global revenue. The idea is to force companies to change behaviour, the fines getting larger is the mechanism for it, they might not be high enough yet but keep violating the law and it will definitely be high.
- stevage 11mo agoDo you honestly expect a company like Anthropic to take data privacy laws seriously? I do not.
- astrange 11mo agoHave you seen GDPR penalties? It's like they fine you 300% of your revenue and then have all your children executed by firing squad. Anthropic in particular is a PBC founded by weenies who thought the other labs weren't being safe enough. I believe up until a few months ago they never used any user data for training, even if you opted in.
- hulitu 11mo ago> Have you seen GDPR penalties? No, i would have love to see them (Hello Microsoft, Google) but, no.
- astrange 11mo agoGoogle has been fined ~$180 million so far. https://en.wikipedia.org/wiki/GDPR_fines_and_notices#Fines_and_notices https://en.wikipedia.org/wiki/GDPR_fines_and_notices#Fines_a... Plus this $377 million one. https://www.cnil.fr/en/cookie-regulation-cnil-continuing-action-plan-initiated-2019-and-has-imposed-two-fines-shein-and https://www.cnil.fr/en/cookie-regulation-cnil-continuing-act...
- quickthrowman 11mo agoAnd we can be 100% certain your data is safe because nobody ever breaks the law. /s How would you even know your data is being used in a way you didn’t authorize?
- array_key_first 11mo agoDepends on where you are. In the US, privacy policies change every week. And they don't gather consent - they just say "you're using our thing? Okay you consent". They'll send you an email with their new privacy policy. Which you don't read, because it's awful to read. And even if you do read it, it doesn't matter, because it's completely fake. The policy doesn't tell you how they actually use your data. It just says they can use any data for any purpose.