41–50 of 341 posts
I was at a loss for why Sift was collecting data like this from companies like airbnb / etc, I worked a project using them around curbing some pretty gnarly levels of credit card fraud. I think it must be that these companies are utilizing their user content fraud scanning (“content integrity”) systems. I don’t know about calling this a consumer score though, but it is truly frightening if that’s how companies are ut…
I’m curious what sort of due diligence these companies must do to authenticate you as a person prior to satisfying an information retrieval request. Given that the exchange is entirely digital, it seems plausible that there are bad actors who would pose as someone else to gain access to their personal information. What sort of liability does one of these data controllers bear when they fail to properly authenticate a…
* Scan of ID
* WebID - video call where they take screenshots of ID and your face
* Cookie - kind of makes sense since 3rd party web trackers Quantcast rely on cookies to identify
So Airbnb was sharing all your messages to hosts with Sift? Food ordering apps were sharing all information about every order with them?
Selling is probably the correct word... as in "They are selling the information like facebook sold user's private messages."
Earlier quoted context omitted.
> There are many companies in the business of scoring consumers. The challenge is to identify them. Once you do, the instructions on getting your data will probably be buried in their privacy policies. Ctrl-F “request” is a good way to find it. Most of these companies will also require you to send a photo of your driver’s license to verify your identity. Here are five that say they’ll share the data they have on you.
1. List your new consumer scoring company and an address for requesting your personal records. 2. Collect personal data supplied as verification for personal record requests. 3. Send personal record requests to other companies holding actual consumer data. 4. You are now in business, ready to sell consumer data!
"a company established outside the EU and is offering goods/services (paid or for free) or is monitoring the behaviour of individuals in the EU."
Enforcement might be difficult, but I'm sure that associated entities have interests in Europe as well..
I'm sure it's been fully risk-assessed and they don't do it.
I am surprised these guys are able to operate outside the normal credit reporting laws. He’s referencing things that happened in 2009, which is well outside the usual 7 year limit for credit report data. Clearly, these companies are going to make the argument that this is not credit report data subject to consumer credit laws, but I’m curious if that has been tested at all. I would think an enterprising lawyer could…
Just requested all of my data from the companies listed. I'm very curious to see the data they return.
How did you submit your government ID securely? Email?