Have there been any enforcement actions against big companies yet?
ViatorOmnium@piefed.social 1 day ago
That's probably a massive GDPR violation. Automated processing of extra sensitive data like political beliefs and religion is not outright forbidden but it subject to extra protections.
ayyy@sh.itjust.works 1 day ago
ViatorOmnium@piefed.social 1 day ago
Meta got a fine of over a billion euros.
Google got a bunch of smaller fines, but it's probably way above everyone else in terms of fines.
Microsoft got half a billion.
Even Apple got an 8 million euro fine, but that was more a tap in the wrist to make them think twice about some data collection.And besides this, large companies are constantly in contact with the authorities and in smaller violations the general policy is to give a warning and let companies stop the illegal data processing voluntarily.
axEl7fB5@lemmy.cafe 17 hours ago
All of them are a slap on a wrist, even Meta
ayyy@sh.itjust.works 1 day ago
I’m so jealous.
basiclemmon98@lemmy.dbzer0.com 1 day ago
Nah, I think all of it is literally just public data offered up by users themselves. If you didn’t want those opinions shared, you shouldn’t have posted them on Reddit.
ViatorOmnium@piefed.social 1 day ago
GDPR also applies to data you get from public sources.
GamingChairModel@lemmy.world 1 day ago
I don’t understand.
If someone writes a reddit post and says “I’m fasting for Ramadan,” can I not infer from that public post that the user is probably Muslim?
ViatorOmnium@piefed.social 1 day ago
You cannot use an algorithm to corelate it with other data without express consent.
bridgeenjoyer@sh.itjust.works 1 day ago
They will get your data from everywhere not just reddit. There needs to be many more laws and punishments for doing this.
Kyrgizion@lemmy.world 1 day ago
I doubt it, since all it ostensibly does is summarize info the user has released freely. How that info is stored and retained exactly might be up for debate though.
bridgeenjoyer@sh.itjust.works 1 day ago
Yeah this seems illegal as fuck
Mubelotix@jlai.lu 1 day ago
Sadly you consented to all of it
ViatorOmnium@piefed.social 1 day ago
GDPR article 9 (1) says you can't play algorithmic guess with people's religion or political opinions unless you gave express permission to the service provider to do it (i.e. it's not covered in the general GDPR boilerplate)
GreenShimada@lemmy.world 1 day ago
Hard agree with this. Does Reddit even have lawyers, or are they just using ChatGPT? Google, Meta, and Tik Tok already paid PII misuse fines for less than this. everything listed is part of the GDPR extended PII list.
Unrelated question: How do I short reddit stock?
magikmw@piefed.social 1 day ago
GDPR prevents using underhanded tactics to assume consent for this type of use.