I've long been curious how GDPR should be applied to Google Home, Alexa, etc. These devices record and upload voice recordings to the cloud (with a percentage apparently shared with Google contractors to process). The audio clips can be recordings of conversations of people who have not consented to being recorded. And I can't imagine it's possible for Amazon or Google to reasonably comply with Art. 15 or 17 (right o…
My guess would be that the person who does consent to the terms of service of the device and plugs it in will be the one responsible for ensuring that it is used in a way that does not invade the privacy of anyone else. It would be similar to me buying an IP camera, agreeing to the terms of service then putting it in my neighbours house without their knowledge.
In the context of the GDPR, I think the question comes down to what rights a third party person has when a user puts their personal information on the company's servers. If someone uploads a video of me without my consent to YouTube, can I get it removed under the GDPR?