Live data from Hacker News

Data Brokers

oag.ca.gov

51–60 of 80 posts

Re: Data Brokers

#51

> a “data broker” is in the business of aggregating and selling data about consumers with whom the business does not have a direct relationship I had to make a few clicks to find the definition, more details here (scroll down to section 1c): http://leginfo.legislature.ca.gov/faces/billTextClient.xhtml...

Lot of companies still need to register. * LinkedIn - Sell your data via Sales Navigator * ZoomInfo - Scrape your email account and sell the data to other businesses - https://www.zoominfo.com/business/about-zoominfo/privacy-pol... * DiscoverOrg * Clearbit - Browser extension scrapes your emails for data and they sell it to others via their "free browser-based add-ons, extensions, or plug-ins" - https://clearbit.com/…

I’m not sure that any browser extension (Clearbit in your example) would have to register. It’s pretty clear that you have a “direct relationship” with them when you install their extension.

Re: Data Brokers

#52

The full submission for [spydialer] says: ----------------------------- > How a consumer may opt out of sale or submit requests under the CCPA: > Go to spydialer.com, then click the link "Do Not Sell My Info". ----------------------------- Cool. Now compare that to another one listed [infocore]: ----------------------------- > How a consumer may opt out of sale or submit requests under the CCPA: > contact the company…

>> Go to spydialer.com, then click the link "Do Not Sell My Info". > Cool. Now compare that to another one listed [infocore]: To opt-out of spydialer.com, you go to https://www.spydialer.com/Consumers/ , then you have to provide all of the information you think it has on you to verify your identity and selectively remove it from their services. I'm not really comfortable providing my full name, address (or addresses…

At the very least, when a company acquires my data through any mechanism, it should be forced to email me with a copy of all the data they have on me, and with a one click link to get them to delete the data and permanently opt out.

Any company found in procession of personal data without the appropriate (delivered) email notifications being sent should be fined at minimum $1000 per individual, and criminal charges if intentional.

This won't put anything like services you voluntarily sign up for out of business (as they send sign up confirmations anyway, or should).

Re: Data Brokers

#53
post #52

Earlier quoted context omitted.

>> Go to spydialer.com, then click the link "Do Not Sell My Info". > Cool. Now compare that to another one listed [infocore]: To opt-out of spydialer.com, you go to https://www.spydialer.com/Consumers/ , then you have to provide all of the information you think it has on you to verify your identity and selectively remove it from their services. I'm not really comfortable providing my full name, address (or addresses…

At the very least, when a company acquires my data through any mechanism, it should be forced to email me with a copy of all the data they have on me, and with a one click link to get them to delete the data and permanently opt out. Any company found in procession of personal data without the appropriate (delivered) email notifications being sent should be fined at minimum $1000 per individual, and criminal charges i…

This would severely backfire if the data broker thought someone else's email account was associated with your identity. Say:

Danny W[ilkins]

- Job Title

- Salary

- Job application records

- Social media post history

- Email 1: dannyw@gmail.com (correct)

- Email 2: dannywilkins@EmployerLLC.com (correct)

- Email 3: dannywinters@hotmail.com (not correct)

I'd assume they'd send the email containing your salary and post history to the two valid emails as well as the one invalid email.

That seems like a potential nightmare for you, for example records of job searches being sent to your employer email.

Re: Data Brokers

#56
It’s so depressing...I spend so much time opting out of unwanted services and data sharing but I feel like I’m losing this battle.

Re: Data Brokers

#57
> California law requires a data broker to register with the Attorney General [...] on or before January 31 following each year in which a business meets the definition of a data broker.

Confused, so this means you won't know who is a data broker this year until next year?

Re: Data Brokers

#58
One straightforward solution is to grant each individual copyright protection over all data that identifies them.

Each person own their own data, and can sue to enforce those rights.

Re: Data Brokers

#59

> a “data broker” is in the business of aggregating and selling data about consumers with whom the business does not have a direct relationship I had to make a few clicks to find the definition, more details here (scroll down to section 1c): http://leginfo.legislature.ca.gov/faces/billTextClient.xhtml...

Lot of companies still need to register. * LinkedIn - Sell your data via Sales Navigator * ZoomInfo - Scrape your email account and sell the data to other businesses - https://www.zoominfo.com/business/about-zoominfo/privacy-pol... * DiscoverOrg * Clearbit - Browser extension scrapes your emails for data and they sell it to others via their "free browser-based add-ons, extensions, or plug-ins" - https://clearbit.com/…

Facebook is like Sauron and LinkedIn is like Saruman.

Re: Data Brokers

#60

Earlier quoted context omitted.

So what pains does this legislation solve? To me it seemed outrageous that a company I had no dealings with, accumulated data on me without my consent, and above all - their data was breached. I thought that's what this legislation was trying to address.

Blacking out credit history would obliterate lending, which would in turn collapse asset prices and lead to a complete restructuring of entire industries and society itself. If that were on the table, you would’ve heard. This is primarily about the companies that buy your phone number from your gym membership or supermarket loyalty card and sell it to telemarketers. They won’t be missed.

I don't think society would need to be restructured.

Many countries do fine without private third party entities managing people's credit history and score. Instead, you have to provide data on your credit worthiness each time you request credit from a particular bank. Such as bills, income proof, assets etc.

Post reply on HN