Hacker News Reader

Comment by sithlord | Hacker News Reader

I would hope not, I would assume the GDPR includes all info collected, including that on an application - so it would be included in that information - doesn't necessarily mean they would.

but wouldn't surprise me one bit

View on HN

That seems like the implication. Obviously they have to collect all that information for an applicant, and they explicitly state "Managing our career opportunities" as a potential use of the collected data.

That happened to me. I received a job offer at their Paris office through a "swipe right if you want to work for Tinder"

GDPR doesn’t apply to most of the world, though.

GDPR applies to companies doing business in EU. Pretty sure that Tinder has to follow EU rules given that they receive euros, albeit indirectly.

GDPR only matters if it's enforced. So far, even blatantly obvious breaches like what Facebook and Google are doing (with their analytics, non-compliant consent prompts, refusal to provide all data in response to subjects' access requests in the case of Facebook, etc) are yet to be punished so there's absolutely no reason for them to worry that a data protection agency is suddenly going to spend time & money examining a very narrow edge-case.

I think you're using an overly broad interpretation of GDPR here. When Tinder/Match, which is a US company, processes the PII of US citizens, there is no federal law that is in effect. Of course if you live in CA you have CCPA to be concerned with, and Brazil now has a law as well, the LGPD.

Reply on news.ycombinator.com