Hacker News Reader

Comment by mrandish | Hacker News Reader

> "sharing access to customers’ location information without consent..."

I'm not seeing anything here preventing the carriers from just adding "sharing location data" to the EULA / privacy policy that no one reads and continuing on - now with "consent". Without a requirement to offer a separate opt-out, this just seems like a temporary road bump that changes nothing in the long run.

View on HN

I would like to see laws addressing the issue itself, e.g. banning any collection of location data unless it's explicitly needed and used by the collecting agent/service themselves, and banning sharing/selling it.

Require companies that store that kind of data to carry insurance that can make anyone damaged by the data collection (and leaks of said data) whole. And the 'make whole' amount definitely needs to be individually defined. You shouldn't get away with paying a little fine of a couple thousand USD if your data leak causes me millions in damages; In that case, you owe me those millions back.

This is covered in the longer version of the document: https://docs.fcc.gov/public/attachments/FCC-24-41A1.pdf

>The Commission has also recognized that an

>opt-in requirement alone is not enough to protect customer CPNI, especially in light of tactics like

>“pretexting,” where a party pretends to be a particular customer or other authorized person in order to

>illegally obtain access to that customer’s information (thus circumventing opt-in requirements).17

Does carrier even have to do anything when say your bank inserts consent language for location data into credit card application? They might or might not qualify that with “for fraud prevention and/or other purposes”. Same for insurance carriers…

I saw such clauses and I’m sure it was about pulling data from your phone carrier.

Reply on news.ycombinator.com