Hacker News Reader

Comment by lozaning | Hacker News Reader

I assume Tinder and the like is doing every shady thing possible to profit off users, but what seems especially gross about this is that they apparently dont limit this to users of their service, but also people applying to work at Tinder? Big YIKES, extra gross.

View on HN

I would hope not, I would assume the GDPR includes all info collected, including that on an application - so it would be included in that information - doesn't necessarily mean they would.

but wouldn't surprise me one bit

That seems like the implication. Obviously they have to collect all that information for an applicant, and they explicitly state "Managing our career opportunities" as a potential use of the collected data.

That happened to me. I received a job offer at their Paris office through a "swipe right if you want to work for Tinder"

GDPR doesn’t apply to most of the world, though.

GDPR applies to companies doing business in EU. Pretty sure that Tinder has to follow EU rules given that they receive euros, albeit indirectly.

GDPR only matters if it's enforced. So far, even blatantly obvious breaches like what Facebook and Google are doing (with their analytics, non-compliant consent prompts, refusal to provide all data in response to subjects' access requests in the case of Facebook, etc) are yet to be punished so there's absolutely no reason for them to worry that a data protection agency is suddenly going to spend time & money examining a very narrow edge-case.

I think you're using an overly broad interpretation of GDPR here. When Tinder/Match, which is a US company, processes the PII of US citizens, there is no federal law that is in effect. Of course if you live in CA you have CCPA to be concerned with, and Brazil now has a law as well, the LGPD.

Reply on news.ycombinator.com