General Data Protection Regulation (“GDPR”) ⚖

1386 readers

1 users here now

Everything related to the #GDPR is discussed here. This is the first and only community specifically for GDPR topics which is decentralized and outside of walled-gardens. #EDPB recommendations and guidance can and should also be discussed here.

For the moment, chatter on the similar California Consumer Privacy Act (CCPA) could be discussed at least until the volume of messages compels us to split it into a separate community.

founded 2 years ago

MODERATORS

freedomPusher@sopuli.xyz

KYC is becoming: know your customer’s customers. FSFE’s payment provider canceled them w/out notice for not sharing info about donors (yes, in a GDPR region) (fsfe.org)

submitted 4 days ago* (last edited 4 days ago) by activistPnk@slrpnk.net to c/gdpr@sopuli.xyz

4 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] voxel@feddit.uk 4 points 4 days ago (3 children)

Just because something happens in a GDPR region, doesn't mean it is legal. I see GDPR violations everyday.

[–] activistPnk@slrpnk.net 1 points 3 days ago (2 children)

Indeed that was why I called it out. To stress what shit is happening despite the GDPR. Violations are rampant and enforcement is sparse.

[–] voxel@feddit.uk 1 points 2 days ago (1 children)

You have the right to file a complaint to a applicable data protection authority.

[–] activistPnk@slrpnk.net 1 points 1 day ago* (last edited 1 day ago)

Data subjects have a right to complain under art.77 to the extent their own data is involved. But I am not a data subject in this case.

I could still complain, but it would not have the force of art.77. It would basically be a request that the DPA voluntarily investigate in an “ex officio” capacity -- on the DPAs own initiative (if they care to do so). I’ve done that before and the DPA simply ignored the complaint. I did not even get an acknowledgement.