Where is the american version of GDPR when we need it? This is arguably worse than Equifax one. edit: nope, this is infinitely worse.
It's coming to California in 2020:
Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
61–70 of 307 posts
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#62Earlier quoted context omitted.
Let's discuss how we can fix this. I'm actually considering leaving my job of 8 years for a probably to be doomed privacy startup. Either way, I'm interested in solutions and more importantly working towards them, even for free.
Legislation. We need legal repercussions for people who wantonly mishandle our personal information. Sorry, but the market can’t help us. This kind of shit needs to be illegal yesterday. It’s just impossible because we have a Congress that is so remarkably out of touch that they won’t do anything about it.
Government funded elections might solve most of our society’s spiraling issues but we can’t have any clue what the value would be until we try it.
And of course we can’t make honest claims to democracy until then either.
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#63Earlier quoted context omitted.
>If I give a company my data, In some cases you're not knowingly giving them your data either.
I just signed a rental agreement for an apartment in the US and in the fine print it says that they can share your data with whoever they want. You can't even opt out. Pretty fucked up.
[deleted]
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#64Earlier quoted context omitted.
Legislation. We need legal repercussions for people who wantonly mishandle our personal information. Sorry, but the market can’t help us. This kind of shit needs to be illegal yesterday. It’s just impossible because we have a Congress that is so remarkably out of touch that they won’t do anything about it.
How so many people are convinced the market will save them from the marker given the last 300 years oh history is beyond me.
In America, they simply do not know the last 300 years of history.
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#65Would be good to get a copy of this database to search the details of top executives involved in privacy-violating companies and publish them.
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#66I still can't understand why leaking SSN should do me harms.
These are primary key, not crediential. But everybody is treating them as crediential.
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#67Earlier quoted context omitted.
It's almost as if the issue is more complicated than the solution represented by the GDPR. I mean, I'm a "tin hat" privacy nut in the USA, but that doesn't mean that I'm a fan of 100% of the GDPR. It has plusses and minuses. It'd be nice to have a conversation about them.
The question though is what's the alternative? The IT industry has failed spectacularly in protecting citizens' personal data. I'm not a fan of EU bureaucracy, but it looks as if they are on the right side of history on this one.
> what's the alternative?
Absolute liability for data losses. Exactis lost 360 million peoples' data. They should be able to (a) form a class and (b) extract money damages from Exactis without having to prove specific harm, which is difficult to do with data loss.
A good model is Illinois' Biometric Information Privacy Act [1]. Broaden the the definition from "biometric identifier" to a longer--but still specific--list. If you want to get fancy, create a regulator who can add things to the list after a public hearing. (The specificity avoids GDPR's "what's personal data?" mess. The public input mitigates the risk of unintended consequences and corruption.)
[1] http://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=3004
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#68When will this stop? When's the last straw? If I gave a bank 100 dollars, and they lost it, I'd have avenues with which to pursue some sort of justice. If I give a company my data, and they lose it, oh well. I wish all personal data was treated like HIPAA, at a minimum.
> When will this stop? When's the last straw? When the top folks in the US government are personally affected. Until then, "congressional hearings" and presidential ambivalence is the most action we'll get out of them. Most people don't really understand what the significance of these events are.
> When the top folks in the US government are personally affected
The OPM breach covered a lot of powerful senior people.
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#69Earlier quoted context omitted.
>If I give a company my data, In some cases you're not knowingly giving them your data either.
I just signed a rental agreement for an apartment in the US and in the fine print it says that they can share your data with whoever they want. You can't even opt out. Pretty fucked up.
> You can't even opt out
I scratched that, and other lines, out of my rental agreement when I rented my New York apartment. The landlord agreed.
Re: Marketing Firm Exactis Leaked a Personal Info Database with 340M Records
#70When will this stop? When's the last straw? If I gave a bank 100 dollars, and they lost it, I'd have avenues with which to pursue some sort of justice. If I give a company my data, and they lose it, oh well. I wish all personal data was treated like HIPAA, at a minimum.
Same flawed logic as in online piracy.
No one lost your data, they still have it, but someone else made a copy.