Live data from Hacker News

Discord fined €800k for failing to comply with several obligations of the GDPR

cnil.fr

151–160 of 306 posts

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#151

Sorry but the points are totally valid. If you delete your account your messages are still available with a userid that if someone has it can be traced back to you. They also don't delete files or pictures you uploaded alone for this they should get fined.

In any case, 800k is a ridiculous amount for such a huge company like Discord.

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#152
post #139
post #127

Earlier quoted context omitted.

I agree with you in principle and I think that the EU is basically extorting American companies, but in your example all that information is stored in your phone, while in this case the information is stored in Discord's servers.

Right which to me is a distinction without a difference. If you and me are both Gmail users and you send me an email then delete your account should Gmail have to reach into my inbox and delete your emails? They’re on Google’s servers after all.

There is definitely a difference between PII data of different users being distributed rather randomly across personal devices vs. it being consolidated within a single company which can then proceed to use that data for all sorts of purposes you may or may not have agreed to.

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#153
post #3

> When a user logged into a voice room closes the DISCORD application window by clicking on the "X" icon at the top right of the window in Microsoft Windows, they actually just put the application in the background and stay logged into the voice room. However, in Microsoft Windows, clicking on the "X" at the top right of the last visible application window will exit the application for the vast majority of applicatio…

>Interesting this is considered [Microsoft] Discord's fault and not Microsoft Windows. Probably because Discord implements the button, no? They configure what happens when you press "X", so their configuration is in violation, not the platform.

But Windows misrepresents that the application is not running, when it is running in the background with access to the mic. Is this not a poor default? The justification here is that Discord behaves differently from "the vast majority of applications". First, I'm not sure if that's true. Second, another justification brought up is that Discord doesn't show the user that their mic is still hot, Windows seems just as culpable for not "protecting by default".

For example, on my Android phone, whenever the mic/camera is in use, even if the app is in the background, the OS displays a green dot in the corner of the screen and when I poke it, it tells me what is using the mic/camera. This is a good default.

I don't think Windows is culpable instead of Discord, but I do think that more protection should be built into Windows, and based on this decision, Windows could get dinged for this as much as Discord.

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#154

Sorry but the points are totally valid. If you delete your account your messages are still available with a userid that if someone has it can be traced back to you. They also don't delete files or pictures you uploaded alone for this they should get fined.

isn't that the case for gmail? if you send me an email with a picture in it, then delete your email account, i can still see your email when logging into my gmail

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#155
post #36

Earlier quoted context omitted.

GDPR applies to all companies that provide services to EU residents.

The EU can certainly claim any absurd jurisdiction they like, but how are they planning to enforce this? Ultimately it seems the primary thing they can do is censor Discord from EU internet.

Which Discord would very much not want, since for major internet businesses the EU is generally at least 20% of their income, if they know what they're doing.

The EU GDP is about 75% of the US one, it's a huge market.

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#156

Sorry but the points are totally valid. If you delete your account your messages are still available with a userid that if someone has it can be traced back to you. They also don't delete files or pictures you uploaded alone for this they should get fined.

I think i read somewhere that they do delete files and images after some time.

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#157

Earlier quoted context omitted.

Which international governments? Why would the US agree to impose an EU fine, and under what legal basis?

Why would European countries extradite american criminals to the US? Because we established a trust in each other and want to keep it that way for both sides benefits.

this is a poor comparison. Extradition treaties exist and contain specific legal obligations. It is not based on trust and there are several pairs of countries that do not have specific extradition treaties.

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#158
post #68

I'm an EU citizen and support the GDPR. But it's only a question of time before the US will interpet these fines as an undeclared trade war and make up the legal framework to do retaliatory strikes against EU tech companies. Borders and tariffs will be the long-term future of the Internet.

Eh, maybe, but also maybe not.

Five states have passed their own privacy laws, with one in effect now and others coming online soon.

If this practice continues, and it likely will, it will soon becoming completely unmanageable for US tech companies to keep up with the myriad of state privacy laws.

At that point the federal government will likely pass a federal privacy law, which supersedes all the state privacy laws. And once we have a federal privacy law, it will likely be designed to at least be somewhat compatible with GDPR.

So, I don’t see the US going to war over this issue. I think the political winds are drifting in the other direction, and the US will follow Europe on this. Eventually.

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#159
post #68

I'm an EU citizen and support the GDPR. But it's only a question of time before the US will interpet these fines as an undeclared trade war and make up the legal framework to do retaliatory strikes against EU tech companies. Borders and tariffs will be the long-term future of the Internet.

Given that EU companies are also getting fines, not only foreign ones, this interpretation would be silly.

The real trade war is all of the Cloud act chicanery https://news.ycombinator.com/item?id=33562182

I should clarify that anyone under fire regarding Schrems II either needs to convince an EU member state's court that the Cloud Act is unlikely to result in GDPR data protection issues, or that the US has no way of obtaining that information in the first place (eg. no US corporation or persons have access to EU citizen data).

Re: Discord fined €800k for failing to comply with several obligations of the GDPR

#160

Earlier quoted context omitted.

[flagged]

The point of GDPR is to defend the user. Tech companies aren't your friends, they only want your money. What baffles me is people being outraged by this fine like they needed to pay that, not a billion dollar tech company. It is justified because what Discord didn't implement can harm the user. it can harm YOU. People easily forget that Internet is for everyone. Even for people that didn't grew with a computer, even…

[deleted]
Post reply on HN