Hacker News Reader

Comment by 4ad | Hacker News Reader

Can I do a GDPR request for the data about myself? How?

It's weird because for oxydata you have to contact their sales team... but peopledatalabs has an opt out form.

https://www.peopledatalabs.com/opt-out-form

People Data Labs privacy policy: 3. ACCESS TO AND CONTROL OVER INFORMATION A person may do any of the following at any time by contacting People Data Labs at support@peopledatalabs.com. People Data Labs will reply to a person’s request within five business days.

A. Access any information we have on them, if any.

B. Change, correct, or delete any information we have them, if any.

C. Express any concerns about People Data Labs using their information.

People Data Labs' team will act swiftly upon a person’s email request to change, correct, provide, delete, or explain anything a person query.

People Data Labs understands if a person would like to opt out of People Data Labs' database. Opting out will stop all data sharing and enriching of all PII in People Data Labs servers for that person. Click here, if you would like to opt-out, or choose to have all data about you removed from People Data Labs' database.

For https://www.oxydata.io/: Review and changes to your information Contact us at sales@oxydata.io to find out what information we have collected about you, and to request any changes to or deletion of it.

I want someone to start an opt-out service, where I send them $20, and they send a book of names by registered mail for opt-outs every month.

An online opt-out system is too easy for them. I want each one to get a phone-book sized list of opt-outs every month.

And the same for data requests. Someone that curates the data collectors, and sends them requests every month.

Do you know which country’s “do not call” list I want to be on? All of them! Get my number on the AU list, the UK list, the DE list...

Let’s crash the system.

Would be a great idea and I bet it could be successful, but maybe at a lower price point and using lots of automation of opt-out forms. As far as opting out of many credit reporting agencies, check out https://www.consumer.ftc.gov/articles/0262-stopping-unsolici... https://www.optoutprescreen.com/?rf=t

Also it seems like theres a service like this called Delete Me, but it also seems like theyre a manual opt-out shop. Would be cool if you could find a way to not have humans doing it. Bet they're just having people on amazon mechanical turk fill these out or something like that. https://joindeleteme.com/how-we-work/

Easier to just send them your own template on paper instead of using theirs.

It should be like a doctor’s prescription in a lot of places: as long as it’s on paper and has the right elements, it’s valid.

Well then thats the trick. A legal research team that develops the form for as many sites as you could find, and then a mechanism to send that form filled with each users data to those sites.

Like, what more do they need than disambiguating identity info and a declaration that I'm opting out? E.g. name and DOB?

My only fear is that you're now sending this all to them, but in 2019, we can safely say your name+DOB+address isn't a secret. Or national identity number if that's a thing in your jurisdiction.

It's the metadata around it we want wiped out.

> I want someone to start an opt-out service, where I send them $20, and they send a book of names by registered mail for opt-outs every month

This exists but it's not cheap: https://www.abine.com/deleteme/

“DeleteMe experts find and remove your personal information.”

Blargh, let the data broker figure out if I’m in their DB or not.

Trying to determine that myself seems risky. Better to send the request to every broker in existence.

I'm not rich but $129/year isn't bad. I'd hesitate mostly because I assume such services are scams.

It's a legit service. I use them and they did ensure that my data was removed from the services they specified. Obviously I'm just some person on the internet so my statement has no intrinsic credibility, but I believe they were also validated in a nyt article awhile back.

Actually working on that project right now - www.thekanary.com. Super early stage but have a big list of brokers and opt out links that I'm automating. Would love early feedback.

Thanks a bunch for compiling those links/emails. I've unsubscribed myself and alerted my family.

They list 2 companies as owners of the data in the article. I guess there would be a good place. I'd love to do that but I'm not on the eu.

But the article says that's possible the actual leak comes from a customer or former customer of these companies and the actual ownership is so far a mistery.

>Can I do a GDPR request for the data about myself? How?

And send it where? It's unclear who owns this server

People Data Labs?

From the article it seems that you can just create a free account and query your own name.

> In order to test whether or not the data belonged to PDL, we created a free account on their website which provides users with 1,000 free people lookups

Seems like OxyData and PDL directly have more up-to-date records anyway.

Could the server owner (Google) have to fulfill the request? Probably not, but interesting to think about.

Start with Google, they will need to figure out and know who the actual owner is and who paid for the resources to host it.

Google are jointly liable for this service, so if you can't find a contact point, then you can email google with the service IP. They will more than happily point you on to the customer to avoid being taken to court.

Reply on news.ycombinator.com