this post was submitted on 23 Feb 2024
793 points (98.9% liked)

Privacy

31981 readers
307 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Firipu@startrek.website 5 points 8 months ago (2 children)

You really believe a large Corp like reddit decided on something as big as this without consulting with their lawyers? Fuck spez, but there's no way not a single lawyer working with reddit remembered the massive legislation that has by far had the largest impact on the internet in years.

[–] Ephera@lemmy.ml 6 points 8 months ago* (last edited 8 months ago)

Corporate lawyers tend to be ...optimistic. And then management will put a risk calculation on top of that. As a result, most larger companies violate the GDPR. See the popular use of Google Analytics or Microsoft 365, for example, which are illegal in the EU, if you ask a DPA¹. Giving them a reality check is never a bad idea.

¹) https://www.imy.se/en/news/four-companies-must-stop-using-google-analytics/
https://news.itsfoss.com/microsoft-office-365-illegal-germany/

[–] AlteredStateBlob@kbin.social 3 points 8 months ago

Especially US companies usually just do things and are willing to engage in lenghty legal battles after the fact.they are very, very litigous.

Another issue to consider is that the GPDR is held vague on purpose since it applies to your neighborhood yoga studio as well as Google or reddit. Entirely different use cases. So there is a lot of room for interpretation.

Looking at the conduct just within Europe, yes, I think it is possible GDPR considerations were either ignored or downplayed to the point of irrelevance. There was a recent study by noyb.eu which showed that DPOs are still often pressured to make recommendations that do not align with GDPR principles.

Either way, the DPAs will have to decide if the complaint has merit. Given new technologies are specifically mentioned im the GDPR, I am at least very curious to see how it turns out.