Have there been any enforcement actions against big companies yet?
ViatorOmnium@piefed.social 3 weeks ago
That's probably a massive GDPR violation. Automated processing of extra sensitive data like political beliefs and religion is not outright forbidden but it subject to extra protections.
ayyy@sh.itjust.works 3 weeks ago
ViatorOmnium@piefed.social 3 weeks ago
Meta got a fine of over a billion euros.
Google got a bunch of smaller fines, but it's probably way above everyone else in terms of fines.
Microsoft got half a billion.
Even Apple got an 8 million euro fine, but that was more a tap in the wrist to make them think twice about some data collection.And besides this, large companies are constantly in contact with the authorities and in smaller violations the general policy is to give a warning and let companies stop the illegal data processing voluntarily.
axEl7fB5@lemmy.cafe 3 weeks ago
All of them are a slap on a wrist, even Meta
ayyy@sh.itjust.works 3 weeks ago
I’m so jealous.
basiclemmon98@lemmy.dbzer0.com 3 weeks ago
Nah, I think all of it is literally just public data offered up by users themselves. If you didn’t want those opinions shared, you shouldn’t have posted them on Reddit.
ViatorOmnium@piefed.social 3 weeks ago
GDPR also applies to data you get from public sources.
GamingChairModel@lemmy.world 3 weeks ago
I don’t understand.
If someone writes a reddit post and says “I’m fasting for Ramadan,” can I not infer from that public post that the user is probably Muslim?
ViatorOmnium@piefed.social 3 weeks ago
You cannot use an algorithm to corelate it with other data without express consent.
bridgeenjoyer@sh.itjust.works 3 weeks ago
They will get your data from everywhere not just reddit. There needs to be many more laws and punishments for doing this.
Kyrgizion@lemmy.world 3 weeks ago
I doubt it, since all it ostensibly does is summarize info the user has released freely. How that info is stored and retained exactly might be up for debate though.
bridgeenjoyer@sh.itjust.works 3 weeks ago
Yeah this seems illegal as fuck
Mubelotix@jlai.lu 3 weeks ago
Sadly you consented to all of it
ViatorOmnium@piefed.social 3 weeks ago
GDPR article 9 (1) says you can't play algorithmic guess with people's religion or political opinions unless you gave express permission to the service provider to do it (i.e. it's not covered in the general GDPR boilerplate)
GreenShimada@lemmy.world 3 weeks ago
Hard agree with this. Does Reddit even have lawyers, or are they just using ChatGPT? Google, Meta, and Tik Tok already paid PII misuse fines for less than this. everything listed is part of the GDPR extended PII list.
Unrelated question: How do I short reddit stock?
magikmw@piefed.social 3 weeks ago
GDPR prevents using underhanded tactics to assume consent for this type of use.