Submitted 11 months ago by SeaJ@lemm.ee to technology@lemmy.world
Poor reporting, as ever. As people have pointed out, you cannot disclaim away the Law. No one can.
If you did a bungee jump, and you sign any kind of waiver, it might protect the company if your glasses fall off and smash. It will not protect them if the rope snaps and break your head.
Lawyer here: this isn’t necessarily correct and in America it’s state dependent. There are absolutely parts of the law you can waive, including negligence of a party which is likely your bungee jumping scenario with the rope snapping.
Are T&Cs retroactive? I would think any new T&Cs could only apply from that point forward, not that they could retroactively absolve themselves of liability or how you could pursue it.
Ain’t America just grand
Well, I yield to your experience and training , !
My understanding is that when signing a liability waiver, first the acknowledgement of risk happens, and then the release of liability. State by state it can be a little bit different for releasing liability, depending on the interpretation. I looked up where I live, and that liability waiver isn’t upheld if one can prove damages (possibly death, in which case someone has to sue upon my lifeless corpse) caused by intentional recklessness, not simply neglect.
It would be interesting to look into some cases. My statement was based on not being able to disclaim negligence at all.
That’s what the helmet is for.
Silly lemmer, you can’t protect your head with paper. You gotta use a helmet. Psh
PSA: you can request deletion of your 23andMe account. It won’t do anything for this past hack, but it’ll at least prevent your data from being included in future hacks (assuming they actually completely delete your data like they’re supposed to).
it’s almost always a soft delete, that is, change active field in database to false, coupled with their terms of service that state vaguely how they start the deletion process which could take months and how they may still keep certain data for legitimate purposes.
And this is why I wish we adopted GDPR more… if they are compliant, then they have to remove all data held when requested. Too bad the US will never care that much to respect individuals’ data like that.
They didn’t.
They just made it so you couldn’t see it anymore.
Why would you this wasn’t even a hack for my understanding?
It was a password stuffing attack. Meaning that a bunch of users with reused crappy passwords had their accounts accessed with their legitimate passwords by attackers.
I’m not sure why this reflects horribly on the company in a way that would encourage one to delete their account?
They stuffed passwords to get them access information not just on the compromised accounts’ profiles but to detailed data on a large group of other people whose accounts weren’t compromised through a function within 23andMe’s database browser.
Too bad, it happened wile the old ToS were active. :p
Nu-uh, you can’t prove that! And even if you can… LALALA! 🙉
One thing to note: the email says to send legal@23andme.com an email to opt out while the updated ToS say to email arbitrationoptout@23andme.com.
I feel like ToS changes should require the user to accept before being enforceable with no right to suspend the user’s account if they don’t and when it comes to data it should only apply to data the user shared after the changes…
pretty sure ToS aren’t enforceable, it’s just that it’s costly to challenge them.
Brunbrun6766@lemmy.world 11 months ago
Well, that’s not how terms of service work. You can still sue
thefartographer@lemm.ee 11 months ago
Previous rulings such as Rubber v Glue and Face v Hand make this look like a really strong strategy
TWeaK@lemm.ee 11 months ago
IANAL, but I think they should be in a far weaker position with their whole “if you don’t object within 30 days we will consider you to have accepted”. They can’t really argue that no positive action from the other party is construed as acceptance of a new contract. If there was continued use of the service that would be different, but no action cannot reasonably be construed as acceptance.
kalkulat@lemmy.world 11 months ago
Desperate strategy they’re hoping will fool some of the people some of the time.
butwhyishischinabook@lemmy.world 11 months ago
Not sure about other states, but in my states you can agree to mandatory arbitration for past incidents.
be_gt@lemmy.world 11 months ago
Olnly if you opt out of the new terms, at least in us
lauha@lemmy.one 11 months ago
In much of Europe, at least in EU, ToS cannot take away legal rights.
Dudewitbow@lemmy.zip 11 months ago
in order for a ToS to be legally enforcable, the user has to see it. A user cannot give consent on an agreement they did not see, therefor in court it would be 23andMes job to verify that the user was indeed aware of the ToS and acted accordingly. they could not say everyone ops in and defend themselves that way by default because not everyone that was forcibly opted in gave an agreement to the new ToS.
WHYAREWEALLCAPS@kbin.social 11 months ago
You can still sue. Whether or not the suit goes through is different story.