I Got Access to My Secret Consumer Score • Hacker News Board

Re: I Got Access to My Secret Consumer Score

#51

Post by jacquesm » Mon, Nov 04, 2019, 1:07 PM UTC

high_derivative wrote: post #16

philmcc wrote: post #3

Earlier quoted context omitted.

Sure, five companies you can reach out to and ask for your consumer trustworthiness records - privacy@sift.com - returnactivityreport@theretailequation.com. - privacy@riskified.com. - privacy@kustomer.com. - https://zetaglobal.com/ is a form.

So can Europeans send a GDRP right-to-be-forgotten request to all of these?

That's two different things. And it's GDPR.

https://en.wikipedia.org/wiki/Right_to_be_forgotten

https://en.wikipedia.org/wiki/General_Data_Protection_Regula...

But the GDPR does have the 'right to erasure' which replaces the 'right to be forgotten'.

Re: I Got Access to My Secret Consumer Score

#52

Post by jacquesm » Mon, Nov 04, 2019, 1:08 PM UTC

GoToRO wrote: post #20

high_derivative wrote: post #16

Earlier quoted context omitted.

So can Europeans send a GDRP right-to-be-forgotten request to all of these?

don't take my word for it, but I believe that you can only if they have opened a subsidiary in EU. The fine is percent of global sales (not profit).

> don't take my word for it

We definitely should not. You are wrong. In that case you are supposed to have to appoint a local representative, see Article 27.

Re: I Got Access to My Secret Consumer Score

#53

Post by GoToRO » Mon, Nov 04, 2019, 1:10 PM UTC

mattlondon wrote: post #34

GoToRO wrote: post #20

Earlier quoted context omitted.

don't take my word for it, but I believe that you can only if they have opened a subsidiary in EU. The fine is percent of global sales (not profit).

As far as I understand it, if they are processing EU citizens' data then they are liable for GDPR regardless of where they run their business from. https://www.techrepublic.com/article/the-eu-general-data-pro...

Then I'm curious how do they enforce it. Maybe with US there are some treaties signed, but what about a foreign country that has no treaties with the EU?

Re: I Got Access to My Secret Consumer Score

#54

Post by jacquesm » Mon, Nov 04, 2019, 1:11 PM UTC

netsharc wrote: post #15

I wonder if as an EUian I can say "say hello to my little friend GDPR"..

You can, but it would be a lot more powerful if you did it in writing in the form of a properly formatted DSAR request.

Re: I Got Access to My Secret Consumer Score

#55

Post by Canada » Mon, Nov 04, 2019, 1:12 PM UTC

ChaosDegenerate wrote: post #28

Will these systems be prone to false data? I.e. if an organization fighting for free speech would create software generating false personas who create false messages, and other events, would they know any better? For example, it wouldn't be too hard to generate hundreds if not thousands of fake Facebook, Instragram, Airbnb, Coinbase, Uber, Gmail, Amazon, etc. accounts doing "stupid things". Like ordering stuff and ca…

That wouldn't matter. These companies would still have real data for actual people. And it's not easy to create tons of fake accounts for services like Coinbase because they have strict identity verification. Any account that doesn't complete it obviously isn't really a real account.

Re: I Got Access to My Secret Consumer Score

#56

Post by Simulacra » Mon, Nov 04, 2019, 1:14 PM UTC

Two points: First, the very act of requesting your data is in a way confirming and verifying the accuracy of the data.

Second: Every prescription you've ever filled with insurance - and even some without - is recorded by companies like Milliman.[0] When you want to buy life insurance, health insurance, etc. they can request to see what medications you're on, have been on, etc.

[0]. https://clark.com/insurance/how-to-see-your-secret-health-cr...

Re: I Got Access to My Secret Consumer Score

#57

Post by brookside » Mon, Nov 04, 2019, 1:16 PM UTC

neotek wrote: post #13

_8j50 wrote: post #2

Would someone with access mind saving us a click due to reg/pay wall?

As consumers, we all have “secret scores”: hidden ratings that determine how long each of us waits on hold when calling a business, whether we can return items at a store, and what type of service we receive. A low score sends you to the back of the queue; high scores get you elite treatment. Every so often, journalists lament these systems’ inaccessibility. They’re “largely invisible to the public,” The New York Tim…

Journalism is valuable, and it is a publication's decision to decide on how to pay for that journalistic work.

I'm not ok with copying and pasting paywalled news articles verbatim on HN.

Re: I Got Access to My Secret Consumer Score

#58

Post by Ididntdothis » Mon, Nov 04, 2019, 1:17 PM UTC

“I don’t really care that these data analytics companies know I made a return to Victoria’s Secret in 2009, or that I had chicken kebabs delivered to my apartment“

People really should care. There is so much data about us being sold without our knowledge. A while ago there was a discussion here that your full salary history is available to be bought.

All this stuff is super creepy and you may increasingly be outnegotiated or rejected by companies that you don’t know that they have your info and that you don’t know that info even exists. For example I find it scandalous that Airbnb messages or order histories are being passed on. That’s just not ok.

Re: I Got Access to My Secret Consumer Score

#59

Post by hammock » Mon, Nov 04, 2019, 1:19 PM UTC

Cieplak wrote: post #26

I’m curious what sort of due diligence these companies must do to authenticate you as a person prior to satisfying an information retrieval request. Given that the exchange is entirely digital, it seems plausible that there are bad actors who would pose as someone else to gain access to their personal information. What sort of liability does one of these data controllers bear when they fail to properly authenticate a…

Not only that, but so much "consumer data" is probabilistic - they believe it's you who's doing something, but it could have been your ex logging into Pinterest on your phone one time, which then linked across her other devices and now "your data" is actually leaking her private data from the rest of her life.

Re: I Got Access to My Secret Consumer Score

#60

Post by zzzeek » Mon, Nov 04, 2019, 1:21 PM UTC

Simulacra wrote: post #56

Two points: First, the very act of requesting your data is in a way confirming and verifying the accuracy of the data. Second: Every prescription you've ever filled with insurance - and even some without - is recorded by companies like Milliman.[0] When you want to buy life insurance, health insurance, etc. they can request to see what medications you're on, have been on, etc. [0]. https://clark.com/insurance/how-to-…

how does that not violate HIPAA ? I see it talking about "you can proactively opt out with hipaa" but everything I've ever seen about HIPAA is that all "opting in" needs to be explicitly granted by the patient.