Live data from Hacker News

GDPR complaint claims Google and IAB ad category lists leak intimate data

techcrunch.com

1–10 of 68 posts

Re: GDPR complaint claims Google and IAB ad category lists leak intimate data

#2
I am curious, if you ask for a dump of your data from Google, where do you have to look to find your ad category ? As far I know, this is not directly accessible from your profile or privacy settings.

Looking at the data selection to export, I am not even sure this is included somewhere.

Re: GDPR complaint claims Google and IAB ad category lists leak intimate data

#4
post #2

I am curious, if you ask for a dump of your data from Google, where do you have to look to find your ad category ? As far I know, this is not directly accessible from your profile or privacy settings. Looking at the data selection to export, I am not even sure this is included somewhere.

Yes, it seems that service providers confuse the "provide a dump of my data" with just being the information a user actively uploaded and stored. The point of this is to get access to any information the service provide might have about the individual requesting the data. And have it all deleted upon request also!

Re: GDPR complaint claims Google and IAB ad category lists leak intimate data

#5
post #4
post #2

I am curious, if you ask for a dump of your data from Google, where do you have to look to find your ad category ? As far I know, this is not directly accessible from your profile or privacy settings. Looking at the data selection to export, I am not even sure this is included somewhere.

Yes, it seems that service providers confuse the "provide a dump of my data" with just being the information a user actively uploaded and stored. The point of this is to get access to any information the service provide might have about the individual requesting the data. And have it all deleted upon request also!

I'm pretty sure GDPR is meant to force disclosure of derived data too.

Re: GDPR complaint claims Google and IAB ad category lists leak intimate data

#6
post #2

I am curious, if you ask for a dump of your data from Google, where do you have to look to find your ad category ? As far I know, this is not directly accessible from your profile or privacy settings. Looking at the data selection to export, I am not even sure this is included somewhere.

I have ad personalization turned off, but you should be able to view and edit your interests from your settings page.

https://support.google.com/ads/answer/2662856

Re: GDPR complaint claims Google and IAB ad category lists leak intimate data

#8
post #7

We should also be able to access our marketing categories without a Google account, since sensitive data is collected and a profile is built even if you don't have a Google account.

I agree but is this a Google specific thing? So many companies gather data on people without letting them see anything... I feel like we need legislation regarding this for all of them.

Re: GDPR complaint claims Google and IAB ad category lists leak intimate data

#9
post #2

I am curious, if you ask for a dump of your data from Google, where do you have to look to find your ad category ? As far I know, this is not directly accessible from your profile or privacy settings. Looking at the data selection to export, I am not even sure this is included somewhere.

Maybe Google doesn't store it, and just uses these categories in the process of auctioning advertisements, sending them as context?

The problem with that being, of course, that any company participating in the bidding process can decide to store that information and build a profile that does have this information.

Re: GDPR complaint claims Google and IAB ad category lists leak intimate data

#10
post #5
post #4

Earlier quoted context omitted.

Yes, it seems that service providers confuse the "provide a dump of my data" with just being the information a user actively uploaded and stored. The point of this is to get access to any information the service provide might have about the individual requesting the data. And have it all deleted upon request also!

I'm pretty sure GDPR is meant to force disclosure of derived data too.

Are you sure? I didn't find a clear sentence on this last time I looked. It seems hard to define what is derived data (if they guess that a 20 year old is a student, is that derived data? or just a guess) and I can imagine it leaking information about other people if it involved aggregating together pieces of data from multiple people.
Post reply on HN