Live data from Hacker News

Request your personal information

amazon.com

31–40 of 89 posts

Re: Request your personal information

#31

> We will provide your information to you as soon as we can. Usually, this should not take more than a month. What benefit does Amazon get out of delaying giving out this information?

The ability to disconnect intent from response is likely perceived as a demotivator?

Also, anecdotally, I ordered my GDPR info from my car company, when I finally received it (days later) my interest in it was gone.

Re: Request your personal information

#32
post #10

Please notice, at all companies (I don't know about AWS) that I have worked for each GDPR request eats up a few man-days of work internally. Some companies getting hit a lot by GDPR have likely automated it, but even a big company (that I know of) with 100k+ private customers (that all have the right) only receives a few requests a quarter, usually by angry customers.. This AWS thingy might not be GDPR, but it might…

Sounds like a good reason to do it.

If enough people start making these requests it makes it costly to store and collect this data = companies might stop collecting it.

Re: Request your personal information

#33
I think there are two sides to a service like that: on the one hand it provides more transparency to the individual customer (good), on the other hand, any external or internal malicious actor now has a very convenient tool to gain access to lot of very personal information about a single individual (bad). It was probably not even possible without a tool like that, not even for jeff bezos.

Re: Request your personal information

#34
post #8

interesting how the request takes about a month to process.. it's almost... almost like... they dont really wanna do it but have to

I built a system just like this at another company whose products or services you likely use often or everyday. This pessimistic view assumes the worst about people like me who build these kinds of systems, as if we’re evil or corrupt or somehow doing this to take something from you. In reality, data is stored in disparate systems, under the custodianship of different organizations. Once you can find everything and a…

I imagine there's also some manual steps going on.

Making sure it's not an account compromise(also just waiting to give the actual owner a chance to notice), checking with compliance, manually getting all the data that's not been automated yet, getting data out of cold storage, checking over the final data set, etc. Many of which would be sequential

Disclaimer: I work at amazon, but not on this

Re: Request your personal information

#35
post #11

When I requested this back in August, it took 5 days to get the results. You get a long list of links that each triggers a download. It's a bit annoying to bulk download by clicking each link one by one, so I made a Browserflow flow that clicks all the links and downloads everything automatically: https://browserflow.app/shared/61e979ed-47f4-4c94-b5a5-3ade0...

DownThemAll is a nearly 20 year old browser addon that can bulk-download links on a webpage.

Man, talk about a flashback. I remember DownThemAll. That was the way to scrape images off porn sites, back when porn sites only had images.

Re: Request your personal information

#37
post #10

Please notice, at all companies (I don't know about AWS) that I have worked for each GDPR request eats up a few man-days of work internally. Some companies getting hit a lot by GDPR have likely automated it, but even a big company (that I know of) with 100k+ private customers (that all have the right) only receives a few requests a quarter, usually by angry customers.. This AWS thingy might not be GDPR, but it might…

> please consider if you wanna to be a resource hog.. Perhaps the corporations could also consider whether they want to be an information hog in the first place and slurp up people's data. You know what the easiest way to fulfill a data request is? To not have any data to give.

In Amazons case there are regulatory requirements for keeping around purchase history, tax, etc…

Re: Request your personal information

#38
post #37

Earlier quoted context omitted.

> please consider if you wanna to be a resource hog.. Perhaps the corporations could also consider whether they want to be an information hog in the first place and slurp up people's data. You know what the easiest way to fulfill a data request is? To not have any data to give.

In Amazons case there are regulatory requirements for keeping around purchase history, tax, etc…

Yes, and? What about all of the data that is kept not owing to legal/regulatory requirements? That's the key issue here, not some trite truism about regulatory record-keeping requirements.

Re: Request your personal information

#39

Earlier quoted context omitted.

DownThemAll is a nearly 20 year old browser addon that can bulk-download links on a webpage.

Man, talk about a flashback. I remember DownThemAll. That was the way to scrape images off porn sites, back when porn sites only had images.

That's mainly what I've been using it for for the past decade lol.

Re: Request your personal information

#40
post #22

I can't do this because amazon does not have my personal information. Amazon has a pseudonym with a dedicated Twilio number that delivers to a private postal box. I burn the pseudonym every few years. Which reminds me ... This is simple because VISA/MC do not validate cardholder name. Everyone thinks they do and most merchants believe that they do but ... they do not. You can use your card with "Mickey Mouse" and it…

My mind is blown. Reflecting on a lifetime of getting declined filling web forms in with a wrong CC number, billing address, expiration or CCV, I...don’t think I’ve ever misspelled my name.

Trying this out on my next purchase for sure.

Post reply on HN