2 ms·
This is only really useful if the company is in the EU. If they aren't then they aren't bound by that law. After all, there is nothing your local Data Protectio
by rmc 14y ago
This is only really useful if the company is in the EU. If they aren't then they aren't bound by that law. After all, there is nothing your local Data Protection Commissioner / courts can do to them to make them comply.
From looking around the FitBit site, it seems they are in California, so Californian law applies. No EU Data Protection Directive there I'm afraid. (If they were in EU their terms & conditions would probably not be binding anyway, against the EU Unfair Terms & Conditions Directive)
- omh 14y agoTheir Privacy Policy[1] says that they're a member of the Safe Harbor scheme - which is supposed to provide "equivalent" protection for exported data. It includes the principle that users should have access to their information, albeit with a significant caveat: Individuals must have access to personal information about them that an organization holds and be able to correct, amend, or delete that information where it is inaccurate, except where the burden or expense of providing access would be disproportionate to the risks to the individual's privacy in the case in question, or where the rights of persons other than the individual would be violated It would be interesting to send them a request and see what their position is. [1] http://www.fitbit.com/uk/privacy http://www.fitbit.com/uk/privacy