By not having a fucking Facebook account! it seems to me that's actually the crux of that court decision.
By not having a fucking Facebook account! it seems to me that's actually the crux of that court decision.
It's more complicated than deciding not to have a Facebook account, though that's a great first step.
>all of which upload your personal data from the phones to their own servers without your knowledge or consent.
Our default legal position shouldn’t be one of accommodating a corporation’s existing market-acquisition practices over people’s privacy.
I'd think the most pro-privacy reasonable approach would be to stop companies from identifying them beyond "someone who did not consent to being tracked".
Facebook has such incredible smart engineers that they can file patents to identify you based on the dust of your camera lens [1]. It should be a cinch to them not to track such third parties in any way, shape or form.
The problem was that they gave zero fucks about the privacy implication to third parties, which have nothing to do - and no business relationship with Facebook. It seems quite the opposite: That the go through great length to maintain shadow profiles and track everybody.
I really hope that the GDPR forces them to clean up their act.
https://gizmodo.com/facebook-knows-how-to-track-you-using-th...
For instance, it could still be legal for Facebook to slurp your friend's address book (and your profile, indirectly), but the regulation could require them to discard and purge that information if they can't immediately match it to an account.
Since I'm not a member of their service there's no valid reason for them to maintain personally identifiable data about me. Let alone that they never asked for my permission and that I never, ever consented to their gobling up of my data and that of other non-members.
At least according to my understanding this is a very clear violation of the GDPR, which - if the courts agree - could cost them dearly.
I wonder how Facebook intends to deal with that. If I interprete the directive correctly they are obliged to delete all such data since storing, mainting and proecssing it clearly violates the law.
Interesting times...