Live data from Hacker News

Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

blogs.microsoft.com

51–60 of 82 posts

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#52
post #35
post #4

Ok so there’s a privacy policy on this website and a standard “we use cookies” header but where is the consent management platform that’s supposed to let me review all the purposes and vendors used on the site so I can choose which ones I want to give consent to and which ones I don’t. The https://github.com/appnexus/cmp appnexus cmp is the only cmp I’ve found that’s open source and provides a clear reference to what…

Here's a marvelous example I've stumbled upon yesterday: https://juro.com/policy.html The entire privacy policy is very well done (and beautifully designed, I may add). Clear options, transparency over who gets your data, ability to use the product without providing PII and all sorts of other goodies. Specific quotes related to consent: > If you have previously given consent to our processing your data you can freely…

It may be a good policy, but this is unrelated to the point on cookie consent made in the parent post. In fact the Juro site uses a variety of analytics cookies without even having a cookie banner in place, let alone any granular system for managing cookie consent.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#53
post #29

Earlier quoted context omitted.

You're missing the point. Do you buy a car and have to peel all the advertising stickers off the windscreen, disable the tracking devices and scrub candy crush off the dashboard. Nope.

> Do you buy a car and have to peel all the advertising stickers off the windscreen Yep, something akin to that. Nearly all dealerships - whether luxury brands or not - place some form of dealership identification / promotion on your car when you buy it and without asking permission. That can be a sticker in the door well, it can be an obnoxious attached badge physically on the car surface (never happens with luxury…

Do they put them back with every servicing too?

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#54

Earlier quoted context omitted.

Don't forget that 'consent' is only one of the bases to collect data. Where the data is vital to the ability to run the service, it will be being collected on the basis of contractual agreement, not consent.

I've seen a lot of privacy policies include lines like "we collect your activity data on the website, so we can improve your experience" or "we use cookies to gauge how to improve our services" or "we collect usage data to improve our marketing across other sites and platforms", which are both horribly vague and certainly not vital to run the service. I took those lines basically verbatim (translated from Danish) fro…

Those that you describe, should certainly be asking consent, or at a real push, listing the cookies and their names so that you can block them in-browser.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#55
post #47

Earlier quoted context omitted.

> Do you buy a car and have to peel all the advertising stickers off the windscreen Yep, something akin to that. Nearly all dealerships - whether luxury brands or not - place some form of dealership identification / promotion on your car when you buy it and without asking permission. That can be a sticker in the door well, it can be an obnoxious attached badge physically on the car surface (never happens with luxury…

That isn’t the norm here in the UK at least.

Eh, the dealer sticker in the back window is pretty standard here isn't it?

I hate them! I've scrubbed them off a few cars now.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#56
post #38

Earlier quoted context omitted.

Probably means Garage Band, which is free multi-track recording software. How dare they ship privacy respecting productivity software with their OS instead of Candy Crush!

Ah, thanks. For some reason, it didn't click for me. Probably because I always do a fresh install after buying a new Mac (which does not install Garage Band). But indeed, are we really comparing a productivity tool that isn't used to extract more money to a third-party game that thrives on in-app purchases? I guess that Windows users are generally less upset about such bundling, since OEMs have done it for years.

Yeah it only comes bundled if you do a "full" install off the MacOS media. I do a fresh minimal install on mine.

Windows users, myself included, have always been upset about the bundling. When you buy a PC these days you have to spend about 2-3 hours removing all the crap from it or doing an install from scratch to remove the cocked up default windows install. I think that less upset is more toleration via attrition. Accepting the status quo.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#57
post #8
post #7

Earlier quoted context omitted.

But I don't have a Microsoft account (only ever used local accounts in Windows 10). How can I ask for all my data which is associated with my installation/license?

This is a very good question. I suspect that at some point someone will fire up their lawyers and find an answer. Not only that but you can’t opt out from data collection at the moment.

Only the basic telemetry (which I assume doesn't include any personal data) can't be opted out of in Windows 10 home. Other privacy settings have to be opted in now. The recent "April update" forces you to say yes/no to all data collection settings.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#58
post #55
post #47

Earlier quoted context omitted.

That isn’t the norm here in the UK at least.

Eh, the dealer sticker in the back window is pretty standard here isn't it? I hate them! I've scrubbed them off a few cars now.

Go have a look around. Since about 2010 it's frowned upon. There are a few dealers who do it but most of the new cars don't have them.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#59
post #57
post #8

Earlier quoted context omitted.

This is a very good question. I suspect that at some point someone will fire up their lawyers and find an answer. Not only that but you can’t opt out from data collection at the moment.

Only the basic telemetry (which I assume doesn't include any personal data) can't be opted out of in Windows 10 home. Other privacy settings have to be opted in now. The recent "April update" forces you to say yes/no to all data collection settings.

Basic telemetry is HUGE. You can't opt out of basic on Pro either.

https://docs.microsoft.com/en-us/windows/privacy/basic-level...

There's enough information in there to identify a machine and user via correlation.

Here's a full analytical report: https://www.lda.bayern.de/media/windows_10_report.pdf

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#60
post #52
post #35

Earlier quoted context omitted.

Here's a marvelous example I've stumbled upon yesterday: https://juro.com/policy.html The entire privacy policy is very well done (and beautifully designed, I may add). Clear options, transparency over who gets your data, ability to use the product without providing PII and all sorts of other goodies. Specific quotes related to consent: > If you have previously given consent to our processing your data you can freely…

It may be a good policy, but this is unrelated to the point on cookie consent made in the parent post. In fact the Juro site uses a variety of analytics cookies without even having a cookie banner in place, let alone any granular system for managing cookie consent.

Fine, here's a Dutch public broadcaster: https://www.npo.nl/

Upon opening it, you'll see a button labeled "Cookie-instellingen aanpassen". Clicking on it allows you to fine tune their cookie policy. "Functional" and "Analytics" categories can't be disabled, while the other (third-party) cookies can.

Post reply on HN