Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Data Brokers

oag.ca.gov

Post reply on HN
Print view View original

61–70 of 80 posts

Re: Data Brokers

#61

Post by progval »

closeparen wrote: post #38
oferzelig wrote: post #12

Earlier quoted context omitted.

So what pains does this legislation solve? To me it seemed outrageous that a company I had no dealings with, accumulated data on me without my consent, and above all - their data was breached. I thought that's what this legislation was trying to address.

Blacking out credit history would obliterate lending, which would in turn collapse asset prices and lead to a complete restructuring of entire industries and society itself. If that were on the table, you would’ve heard. This is primarily about the companies that buy your phone number from your gym membership or supermarket loyalty card and sell it to telemarketers. They won’t be missed.

> Blacking out credit history would obliterate lending

Credit history companies like Equifax are very much an American thing; lending still works everywhere else.

They are such a non-topic in France that I only learned about them last year, and the French Wikipedia page on the subject is very short, and only documents the US, Canada, and China: https://fr.wikipedia.org/wiki/%C3%89valuation_des_risques-cl...

And IANAL, but it seems to me that credit history databases are made illegal by Article 5 of the 1978 "Computing and freedoms act" https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFT...

Re: Data Brokers

#62

Post by ekianjo »

dialfordollars wrote: post #21
hbcondo714 wrote: post #5

> a “data broker” is in the business of aggregating and selling data about consumers with whom the business does not have a direct relationship I had to make a few clicks to find the definition, more details here (scroll down to section 1c): http://leginfo.legislature.ca.gov/faces/billTextClient.xhtml...

Lot of companies still need to register. * LinkedIn - Sell your data via Sales Navigator * ZoomInfo - Scrape your email account and sell the data to other businesses - https://www.zoominfo.com/business/about-zoominfo/privacy-pol... * DiscoverOrg * Clearbit - Browser extension scrapes your emails for data and they sell it to others via their "free browser-based add-ons, extensions, or plug-ins" - https://clearbit.com/…

How about Microsoft? With all the telemetry in Windows 10 and what they know about the end users, the only question is whether or not they sell the data to anyone, I guess?

Re: Data Brokers

#63

Post by AJ007 »

dannyw wrote: post #52
xendipity wrote: post #19

Earlier quoted context omitted.

>> Go to spydialer.com, then click the link "Do Not Sell My Info". > Cool. Now compare that to another one listed [infocore]: To opt-out of spydialer.com, you go to https://www.spydialer.com/Consumers/ , then you have to provide all of the information you think it has on you to verify your identity and selectively remove it from their services. I'm not really comfortable providing my full name, address (or addresses…

At the very least, when a company acquires my data through any mechanism, it should be forced to email me with a copy of all the data they have on me, and with a one click link to get them to delete the data and permanently opt out. Any company found in procession of personal data without the appropriate (delivered) email notifications being sent should be fined at minimum $1000 per individual, and criminal charges i…

Does that have to be the email account you registered with that business? It definitely is concerning if someone could effortlessly assemble a database of all of this information just by getting control of your email address. Chat logs, Alexa recordings, geo locations going back years, every Uber ride you ever called and the addresses you came and went to.

Even the deletion requests could cause an identity theft nightmare. One hack and all of your Facebook, Apple, Google, Microsoft, Steam/Blizzard/Any game company, identify and digital assets are gone forever with no chance of return.

Re: Data Brokers

#64

Post by [deleted] »

downandout wrote: post #51
dialfordollars wrote: post #21

Earlier quoted context omitted.

Lot of companies still need to register. * LinkedIn - Sell your data via Sales Navigator * ZoomInfo - Scrape your email account and sell the data to other businesses - https://www.zoominfo.com/business/about-zoominfo/privacy-pol... * DiscoverOrg * Clearbit - Browser extension scrapes your emails for data and they sell it to others via their "free browser-based add-ons, extensions, or plug-ins" - https://clearbit.com/…

I’m not sure that any browser extension (Clearbit in your example) would have to register. It’s pretty clear that you have a “direct relationship” with them when you install their extension.

[deleted]

Re: Data Brokers

#65

Post by plzHireMeImGood »

dialfordollars wrote: post #21
hbcondo714 wrote: post #5

> a “data broker” is in the business of aggregating and selling data about consumers with whom the business does not have a direct relationship I had to make a few clicks to find the definition, more details here (scroll down to section 1c): http://leginfo.legislature.ca.gov/faces/billTextClient.xhtml...

Lot of companies still need to register. * LinkedIn - Sell your data via Sales Navigator * ZoomInfo - Scrape your email account and sell the data to other businesses - https://www.zoominfo.com/business/about-zoominfo/privacy-pol... * DiscoverOrg * Clearbit - Browser extension scrapes your emails for data and they sell it to others via their "free browser-based add-ons, extensions, or plug-ins" - https://clearbit.com/…

Zoominfo and discoverOrg are the same company now

Re: Data Brokers

#67

Post by hjotp5 »

dannyw wrote: post #52
xendipity wrote: post #19

Earlier quoted context omitted.

>> Go to spydialer.com, then click the link "Do Not Sell My Info". > Cool. Now compare that to another one listed [infocore]: To opt-out of spydialer.com, you go to https://www.spydialer.com/Consumers/ , then you have to provide all of the information you think it has on you to verify your identity and selectively remove it from their services. I'm not really comfortable providing my full name, address (or addresses…

At the very least, when a company acquires my data through any mechanism, it should be forced to email me with a copy of all the data they have on me, and with a one click link to get them to delete the data and permanently opt out. Any company found in procession of personal data without the appropriate (delivered) email notifications being sent should be fined at minimum $1000 per individual, and criminal charges i…

There’s this odd grey area , it seems Zillow is claiming it’s publicly available data which I believe they are right as the data comes from government lease knowledge. So you don’t own your name and address. If I own a business that wants to use machine learning and guess if you are republican or Democrat based on your house location do you own that guess when I sell it? Is that your data?

Re: Data Brokers

#68

Post by throwaway4392 »

Err-- I have a successful business that falls under the "data broker" category and requires I register, but I won't.

I won't because they don't tell you what the "fee" is until the Attorney General "reviews" the submission and then assigns a fee to you. Sounds like extortion to me. I am not going to give them all of the leverage and then accept whatever fee they want to levy on me. If they want me to register, have a fixed fee and be up front about it.

I am willing to accept the penalty fee for not registering. At least I know what it is and it's well within the financial capability of my business, so who really cares.

Selling people's data is fine as long as the state gets a cut I guess?

Re: Data Brokers

#69

Post by dodobirdlord »

lmkg wrote: post #41
dodobirdlord wrote: post #11

Earlier quoted context omitted.

Google and Facebook don't sell user data. It's much more profitable to keep it for themselves than to sell it to others.

CCPA's definition of selling data is both expansive, and a little vague. Google Ads (formerly AdWords) now has an API so that customers can disable possibly-sales-like features on a per-use basis if someone clicks "Do not sell my information." So, while Google doesn't sell users information, they're only willing to go to bat and say "this is definitely not a Sale Of Information under CCPA" for a subset of the service…

Yikes, this reminds me of the nebulousness of GDPR. I guess the intent much like GDPR is to write a law too vague to follow and then fine the crap out of companies.

Re: Data Brokers

#70

Post by lonelappde »

vineyardmike wrote: post #44
ronzensci wrote: post #40

Earlier quoted context omitted.

"Existing law, the California Consumer Privacy Act of 2018, beginning January 1, 2020, among other things, grants a consumer a right to request a business to disclose the categories and specific pieces of personal information that it collects about the consumer, the categories of sources from which that information is collected, the business purposes for collecting or selling the information, and the categories of th…

The ad you see in the search results was put their by google after an advertiser said “advertise to someone who searches for X, and also likes hacker news”. Google wouldn’t share that data to the advertiser. Once you click the ad... that’s another story.

Does clicking on a link to a Google.com URL create a consensual relationship with whoever Google.com redirects to? That seems absurd.
Post reply on HN