Yes. If the data cannot be tracked to one person, it is not regulated. So anonymous tracking cookies are still OK, but attaching it to an IP/name/phone number etc. is not.
I don’t believe that’s true. “Anonymous” tracking cookies are still unique to the individual and such can easily contribute to identifying them, and so are included as personal.
Browser signature + IP address is all you need to uniquely correlate a user from system A to system B in the vast majority of cases
> Then there's the practicality of things. If you delete your account here on HN, would you expect all conversations that you participated in to be removed? All references to your comments? Or all comments that you made removed? There's been few debates here about the definition of to 'delete' which I won't get into. However, as a user, it rubs me wrong when companies equate simple username disassociation with deleti…
> A user has the right to have removed all content they've produced regardless of whether it's linked with other posts. Do they though? Maybe I'm understanding it wrong, but I thought the GDPR only applies to personally identifying information, not all data ever generated by a user. So by disassociating the user name and the post, the post has suddenly ceased to be personally identifying information and no longer nee…
That's difficult, though. What if the contents of a post provide identifying details of the owner of the account?
How do we really know that this is actual deletion and not a deleted="true" in their databases? > It is inaccessible to other people using Facebook. The wording does sound very convincing but I really don't think we can just believe their word. After all it's Facebook.
It seems a bit naive to think that a service provider would scrub their systems on individual requests. It's not practical to perform a delete in some environments. It's certainly not practical to go through backup files and delete references in others. Everybody goes through a data recovery scenario at some point. What you should expect is best effort. Nobody is going to re-train their neural networks that reference…
Not a tangent. Those were all good, relevant points.
>But afaik hn does no business in the EU - so it's not clear what sanctions would be applicable. Since EU citizens are registered users, it applies.
No. EU laws/regulations dont't apply outside its jurisdiction. GPDR will affect Facebook, Google etc. just because they are operating in EU market[0]: "This won't apply to every U.S. business — just the ones that are knowingly, and actively, conducting business in the EU. In this vein, EU courts have the discretionary ability to determine if a U.S. company was purposely collecting EU resident data and subverting GDPR…
Wonder how long that'll last what with the US intent on applying it's laws and regulations outside its jurisdiction.
No. EU laws/regulations dont't apply outside its jurisdiction. GPDR will affect Facebook, Google etc. just because they are operating in EU market[0]: "This won't apply to every U.S. business — just the ones that are knowingly, and actively, conducting business in the EU. In this vein, EU courts have the discretionary ability to determine if a U.S. company was purposely collecting EU resident data and subverting GDPR…
I respectfully disagree. As you can see at [0], quote, "as [the GDPR] applies to all companies processing the personal data of data subjects residing in the Union, regardless of the company’s location [...] Non-Eu businesses processing the data of EU citizens will also have to appoint a representative in the EU." edit: This means it applies to EU citizens regardless of where the processor is located and to non-EU cit…
Yes, but I'm sure this will only be valid for big enough companies (read serving millions of EU citizens) as it's subjective what "processing the data of EU citizens" actually means. It's not realistic to expect every minor mom&pop eshop or minor online service worldwide to appoint a representative in the EU. Furthermore, enforcing these rules will highly depend on international relations as it's outside of EU jurisdiction and it can only reach non-EU companies by collaboration and signing treaties with other governments, so this means USA and maybe Canada, but I highly doubt to see companies from China or Russia etc. to be held accountable.
I respectfully disagree. As you can see at [0], quote, "as [the GDPR] applies to all companies processing the personal data of data subjects residing in the Union, regardless of the company’s location [...] Non-Eu businesses processing the data of EU citizens will also have to appoint a representative in the EU." edit: This means it applies to EU citizens regardless of where the processor is located and to non-EU cit…
Yes, but I'm sure this will only be valid for big enough companies (read serving millions of EU citizens) as it's subjective what "processing the data of EU citizens" actually means. It's not realistic to expect every minor mom&pop eshop or minor online service worldwide to appoint a representative in the EU. Furthermore, enforcing these rules will highly depend on international relations as it's outside of EU jurisd…
>Yes, but I'm sure this will only be valid for big enough companies
Not really, the wording is quote clear. As is "processing the data of EU citizens".
I doubt any minor eshop or online service will appoint a representative, they will however still have to conform to the GDPR rules.
Yes, but I'm sure this will only be valid for big enough companies (read serving millions of EU citizens) as it's subjective what "processing the data of EU citizens" actually means. It's not realistic to expect every minor mom&pop eshop or minor online service worldwide to appoint a representative in the EU. Furthermore, enforcing these rules will highly depend on international relations as it's outside of EU jurisd…
>Yes, but I'm sure this will only be valid for big enough companies Not really, the wording is quote clear. As is "processing the data of EU citizens". I doubt any minor eshop or online service will appoint a representative, they will however still have to conform to the GDPR rules.
Well, only time will tell, I just relayed what I've heard from people much more knowledgeable in this area than me. How I understand this is that if you serve many enough EU citizens, please be kind, open a branch in EU or at least send a representative, because you are de-facto doing business here. Mainly this is to avoid situations where, for example Facebook, closes its EU offices and pretend to have no EU presence (and no need to abide EU regulations) despite hundreds of millions EU citizens use their services.
Ever since deleting facebook I've felt so much ___. It's only once I quit the site I was able to take a long hard look at my perception of ____ and realized that everyone else does ____ while I should do _____. I realized that I'm actually ____, not ____. I started handling my _____ relationships in a healthier, more ____ manner.
Q: How do you know if someone on Hackernews doesn't have a Facebook account?
Don't underestimate how bad bad ads can be. I turned off targeted advertising on my Android phone for a while. The result was that around 50% of ad banners I saw were ultra-spammy strobing things--presumably the only ones that will pay for untargeted ads--making apps with built-in ad banners essentially unusable. I wound up changing back. That may have been the intention. (An Android ad blocker would probably work be…
Curious - what apps do you use that has apps, but doesn't have a paid option (that you are willing to pay for)? I rarely see ads on my android (I do use ad blocker for Web browsing).