#gdpr

We are looking for 2 postdocs: one legal, one technical, both privacy-related. https://www.ru.nl/en/working-at/job-opportunities/postdoc-position-legal-aspects-of-online-tracking-and-privacy-enhancing-technologies https://www.ru.nl/en/working-at/job-opportunities/postdoc-position-usable-privacy-enhancing-technologies-and-attribute-based-identity-wallet-technology I would really appreciate it if you could boost this message. Thank you! #academia #gdpr #privacy #jobs

"Usually, the GDPR permits processing for specific purposes (e.g. retention for tax records or fraud prevention). However, the agreed Article 88c (or Article 88bis) legitimises an entire technology. Regardless of the purpose for which it is used, any AI system could lawfully take any personal data by default. For example, the proposed Article would also permit the training and use of AI for manipulation, disinformation, the generation of nude images or killer drones, and indeed any other questionable purpose. Many processing operations that were so far illegal could suddenly become legal – just because they are done “in the context” of an AI system. For example, data processing for personal advertising purposes (without consent) is currently illegal in the EU. Now, however, advertising could suddenly become legal if it is personalised using AI technology. Max Schrems: “It’s like saying anything goes – no matter what you do – as long as it’s done with AI. If something is illegal in an Excel spreadsheet, it's legal if done with an AI agent. It’s utterly absurd to give preferential treatment to a high-risk technology over every other computer system.”" https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies #EU #GDPR #AI #BigTech #DataProtection #DigitalExpropriation #DigitalOmnibus

Getting my TOTP data out of Twilio's Authy app thanks to the GDPR: https://blog.tomayac.com/2026/10/17/getting-my-totp-data-out-of-twilios-authy-app-thanks-to-the-gdpr/ New blog post in which I document how I used the sledgehammer 🔨 that is #GDPR to get my #TOTP #2FA 🔐 data out of #Authy and built myself a TOTP Vault PWA.

⚖️ Back in 2020, noyb (in cooperation with the Norwegian Consumer Council) filed a complaint against the online advertising company #Xandr (now part of #Microsoft) for processing personal data from the dating app #Grindr. 🇳🇴 Now, the Norwegian DPA (Data Protection Authority) Datatilsynet has issued its decision – and fined Xandr € 8.5 million (NOK 92 000 000) for its #GDPR violations. 💸 This is a major blow to the online adtech industry! For more information, visit:

🇪🇺 The #EU is currently changing its core privacy law, the #GDPR. Members of the European Parliament have made more than 1000 amendments - we have analyzed them all. 🔍 Want to know who is playing into the hands of #BigTech by undermining protections, and who is actually trying to defend your #privacy? 👉 Visit https://gdpr-omnibus.eu and look up your MEP by country and political group.

I just published a blog post that explains the latest #WSocial controversy: W Social is publishing as a permanent record on the open web the full names, nationalities and approximate birthdays of their verified users... who may be unaware all this information is available for anyone to see, outside of the social network. 🔗 : https://blog.elenarossini.com/public-by-design-how-w-social-makes-their-verified-users-personal-details-visible-on-the-open-web/ #privacy #GDPR #EUBigTech

@_elena@mastodon.social @pallenberg@mastodon.social @EUCommission@ec.social-network.europa.eu maybe also a case for the new @bfdi@social.bund.de if it is in his jurisdiction . . if nothing happens .. and there comes no (insightful) statement from officiual channels i would say #GDPR is more #JurisFiction than #JurisDictionhttps://www.jasperfforde.com/thursdaynext/jurisfiction/contents.html#WIdentitiy#wsocial_notsocial

@navi@social.vlhl.dev @domi@donotsta.re @ska@social.treehouse.systems I predicted the storm, as well as a systemd-aged, as well as the #GDPR angle, over a fortnight ago. It took less than a day from my post for the first person, in reply, to propose an actual such #AgeVerification dæmon. https://mastodonapp.uk/@JdeBP/116156028746782578 This clearly model legislation is also slightly different in different states, as at least two legislatures amended the original bill. Which is going to cause further problems. https://mastodonapp.uk/@JdeBP/116176048755057656 #ColoradoLaw #IllinoisLaw #CaliforniaLaw #USLaw #Unix

I foresee:

1. #Debian eventually following #MidnightBSD's lead and cutting #California off from #FreeSoftware; after lengthy mailing list discussions where at least one person tries to deny with convoluted nonsense the plain reading of the statute.

2. A storm when someone points out that the #MobaXTerm version of APT isn't exempt, nor is RPM. (Goodness knows what IBM is going to do.)

3. An even bigger storm when someone adds an 'age' field to systemd's JSON User Records, to be enforced and served out over Desktop Bus via a systemd-aged service or some such. Much fun if that someone comes from a #GDPR country.

4. Some nutter taking a Linux distribution to court because it doesn't enable developers to control whether 16-year-olds can install rustc and busybox.

#CaliforniaLaw #Unix #rust #USLaw #AgeVerification #FreeBSD #OpenBSD #NetBSD

US Supreme Court just blew up EU-US Data Transfers https://noyb.eu/en/us-supreme-court-just-blew-eu-us-data-transfers #gdpr #dsgvo #noyb #privacy

RE: https://mastodon.ar.al/@aral/117330246532210453 #call2action #legislation #proposals #zeitgeist #humanRights #democracy ["Use of personal data 'in the context of AI" should automatically be lawful. "Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens 'in the context' of AI." Schrems: *“Under these proposals, the profits of AI companies would trump European’s fundamental right to privacy.”*] #ireland #eu #BigTech #GDPR #AI #privacy

Ireland = Big Tech’s bitch EU = ? “AI: EU Member States plan ‘digital expropriation’ of Europeans in the interest of AI companies In a leaked document, the Irish Presidency proposes to EU Member States that the interest of OpenAI, Anthropic, Google, Meta and SpaceX to make profits should take precedence over the fundamental right to data protection. Use of personal data ‘in the context of AI’ should automatically be lawful. There seems to be wide informal agreement by many Member States. In particular, Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens ‘in the context’ of AI.” – @noybeu@mastodon.socialhttps://noyb.eu/en/ai-eu-member-states-plan-digital-expropriation-europeans-interest-ai-companies Hey, @EUCommission@ec.social-network.europa.eu, you Big Tech’s bitch too? Shall we just do away with all this “human rights” and “democracy” malarkey and let you guys breathe a little? #ireland #eu #BigTech #GDPR #AI #privacy #humanRights #democracy

EBCDIC is incompatible with GDPR https://shkspr.mobi/blog/2021/10/ebcdic-is-incompatible-with-gdpr/ Welcome to acronym city! The Court of Appeal of Brussels has made an interesting ruling. A customer complained that their bank was spelling the customer's name incorrectly. The bank didn't have support for diacritical marks. Things like á, è, ô, ü, ç etc. Those accents are common in many languages. So it was a little surprising that the bank didn't support them. The bank refused to spell their customer's name correctly, so the customer raised a GDPR complaint under Article 16. The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Cue much legal back and forth. The bank argued that they simply couldn't support diacritics due to their technology stack. Here's their argument (in Dutch - my translation follows) Bank X also explained that the current customer data management application was launched in 1995 and is still running on a US manufactured mainframe system. This system only supported EBCDIC ("extended binary-coded decimal interchange code"). This is an 8-bit standard for storing letters and punctuation marks, developed in 1963-1964 by IBM for their mainframes and AS/400 computers. The code comes from of the use of punch cards and only contains the following characters… (Emphasis added.) EBCDIC is an ancient (and much hated) "standard" which should have been fired into the sun a long time ago. It baffles me that it was still being used in 1995 - let alone today. Look, I'm not a lawyer (sorry mum!) so I've no idea whether this sort of ruling has any impact outside of this specific case. But, a decade after the seminal Falsehoods Programmers Believe About Names essay - we shouldn't tolerate these sorts of flaws. Unicode - encoded as UTF-8 - just works. Yes, I'm sure there are some edge-cases. But if you can't properly store human names in their native language, you're opening yourself up to a lawsuit. Source GDPRhub - 2019/AR/1006 DanceReactions Marie ʕʘᴥʘʔ Julien @mariejulienTrès intéressant ! Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 40💬 2🔁 011:54 - Wed 20 October 2021 Grumpy Nat 🇨🇭🇧🇷🇲🇫 @Nat_KeelyHâte de mettre en justice tous les sites et autres compagnies qui ont décidé que le fait que j'ai un accent dans mon nom de famille soit source de bug (avec évidemment un message d'erreur qui n'a rien à voir. Histoire de bien pas comprendre pourquoi ça marche pas) Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 3💬 0🔁 010:43 - Wed 20 October 2021 Lays Y. M. Farra @LYMFHSRLa France va sortir de l'UE juste pour que leur état-civil et autres administrations puissent continuer à ruiner la vie de quelqu'un parce qu'il a un tilde dans son nom Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 9💬 0🔁 013:38 - Wed 20 October 2021 KristoferA 🌏 @KristoferADoes this mean that Z̷̡̧̢̰͓̪͖̭͙̰̣̱̬̹̙̜̪̣̏̿̏̋͑́̒͑́̒̿̇̈̍̇̌͝͝a̵̡̧͍̘̮̤̙̹͙̦̙͙͖͓̥̟̦͔͒̇̊̊̔̓́͒́̌̈́̑͋̏̏̏̚͘͝͠͝l̶͉̯̱͇̭̭̉̉̈́̿͐̽̒̎̽͌̚͜ģ̸̧̛͙̩̹̰̤̱̖̘̻̪̻̮̫̟̙̲͍̰̻͕̗̫̿̆̃́͗̽̊̽̌̔̂͂̈͊̐̈́̈̈́̈̓̆͌̑́̕͜ǫ̶̢̹̥̮̟͍̔̑̔̽ can finally open a bank account? Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 16💬 0🔁 013:10 - Wed 20 October 2021 Bastien Nocera @hadessukNext up, I’m suing La Poste for still using ISO-8859-1 when printing labels. Poor “Frédéric” I recently sent a game to… Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 7💬 0🔁 016:08 - Wed 20 October 2021 Michael Büker 🇺🇦 @emtiuEine Erschütterung der Macht, als würden Millionen Banken-ITler in panischer Angst aufschreien und dann verstummen. Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 25💬 2🔁 006:13 - Thu 21 October 2021 #gdpr #name #unicode

#Google fined €403 million over location data #privacy violations https://www.bleepingcomputer.com/news/security/google-fined-403-million-over-location-data-privacy-violations/ #Ireland #DPC #GDPR

🤮 EU Member States propose a #ReverseRobinHood: Take personal data from Millions of people and give it to the US-Billionaires. Data gathering for "AI processing" made automatically legal under the #GDPR. #DigitalLandGrab

#GDPR & #AI - Irish EU Presidency proposes that "AI trumps the GDPR" in new leaked documents. This is nothing but the #DigitalExpropriation of Europeans on behalf of Big Tech.. 😣

1/3 🚨 EU governments could be just days away from agreeing to a deal on the #DigitalOmnibus on Data that would weaken some of the basic protections people rely on under the #GDPR such as knowing who is using their data and why, being able to ask what data a company holds about them, and objecting to certain uses or expecting it to be kept secure. Two things are especially worrying... 🧵

I really miss the time when the #eu @EUCommission@ec.social-network.europa.eu was still focused on, or at least respecting its peoples #privacy. I really liked the idea they tried to achieve with the #gdpr. Now, only a few months after #chatcontrol "we need to read all of your private messages" ruling, we get the #eukidsact "You need to identify yourself when using anything on the internet" ruling. I miss the old EU

Personally, I’m more interested in being able to process personal data locally, which is legally impossible online. #GDPR

@revk@toot.me.uk Good point! You've sent me to a search engine. The law seems to be different for fleet operators and private individuals. Apparently there's a narrow exemption for domestic purposes, which lets you use #dashcam footage for a police report or an insurance claim, but that exemption evaporates if you share the video on YouTube or social media. Fleet operators, in contrast, have to comply with #GDPR in all its majesty. @anon_opin@mastodon.social @mikecox@mastodon.iow.social