Have there been any enforcement actions against big companies yet?
ViatorOmnium@piefed.social 2 months ago
That's probably a massive GDPR violation. Automated processing of extra sensitive data like political beliefs and religion is not outright forbidden but it subject to extra protections.
ayyy@sh.itjust.works 2 months ago
ViatorOmnium@piefed.social 2 months ago
Meta got a fine of over a billion euros.
Google got a bunch of smaller fines, but it's probably way above everyone else in terms of fines.
Microsoft got half a billion.
Even Apple got an 8 million euro fine, but that was more a tap in the wrist to make them think twice about some data collection.And besides this, large companies are constantly in contact with the authorities and in smaller violations the general policy is to give a warning and let companies stop the illegal data processing voluntarily.
axEl7fB5@lemmy.cafe 2 months ago
All of them are a slap on a wrist, even Meta
ayyy@sh.itjust.works 2 months ago
I’m so jealous.
basiclemmon98@lemmy.dbzer0.com 2 months ago
Nah, I think all of it is literally just public data offered up by users themselves. If you didn’t want those opinions shared, you shouldn’t have posted them on Reddit.
ViatorOmnium@piefed.social 2 months ago
GDPR also applies to data you get from public sources.
GamingChairModel@lemmy.world 2 months ago
I don’t understand.
If someone writes a reddit post and says “I’m fasting for Ramadan,” can I not infer from that public post that the user is probably Muslim?
ViatorOmnium@piefed.social 2 months ago
You cannot use an algorithm to corelate it with other data without express consent.
bridgeenjoyer@sh.itjust.works 2 months ago
They will get your data from everywhere not just reddit. There needs to be many more laws and punishments for doing this.
Kyrgizion@lemmy.world 2 months ago
I doubt it, since all it ostensibly does is summarize info the user has released freely. How that info is stored and retained exactly might be up for debate though.
bridgeenjoyer@sh.itjust.works 2 months ago
Yeah this seems illegal as fuck
Mubelotix@jlai.lu 2 months ago
Sadly you consented to all of it
ViatorOmnium@piefed.social 2 months ago
GDPR article 9 (1) says you can't play algorithmic guess with people's religion or political opinions unless you gave express permission to the service provider to do it (i.e. it's not covered in the general GDPR boilerplate)
GreenShimada@lemmy.world 2 months ago
Hard agree with this. Does Reddit even have lawyers, or are they just using ChatGPT? Google, Meta, and Tik Tok already paid PII misuse fines for less than this. everything listed is part of the GDPR extended PII list.
Unrelated question: How do I short reddit stock?
magikmw@piefed.social 2 months ago
GDPR prevents using underhanded tactics to assume consent for this type of use.