Hacker News
points by tpmoney 15 hours ago | 0 comments
For the GDPR to have impact here, wouldn't they have to be collecting the information in the first place? If they're doing all the work on your own computer, that wouldn't trigger any GDPR issues.
[–] 4thguy 14 hours ago
Data collection is still data collection, it doesn't matter whether I am the one processing that data or a third party :)

Edit: I am not making any claims on what constitutes as data only what is considered as processing. And yes, data collection rules under GDPR can be quite absurd

[–] semiquaver 14 hours ago
It does matter. Your interpretation of “data collection” leads to absurd results.
[–] tpmoney 14 hours ago
How far does this go? Are the Bayesian spam filters that email clients have had for years that use your own classifications GDPR violations because they collect data about what you do or don’t mark as spam? Is your browser a GDPR violation because it collects data about your system that can be used to fingerprint you? Does your OS violate the GDPR when it displays your most recently accessed files in a file picker or as first suggestions when you search for something? Is the SMART monitoring built into your drives a GDPR violation? My understanding of the GDPR is that it applies to data the company is collecting about you. If the company never gets the data in the first place, then they haven’t collected it.
[–] 4thguy 13 hours ago
1. Spam filters. No, the data was collected explicitly for the spam filter to work. Anything else? Not unless you consent to it. 2. Browser collection. The browser itself? There's an agreement when installing it. The websites? There's the cookie banners. 3. OS. Is it your data? No permission needed. Your device, your data. Other people's data? Unclear. Depends on what you told the person when you collected said data. 4. SMART. I don't know a lot about how it works.

I was talking about the data you collect. Your own data processed on your device, it's fine. Your own data uploaded to be processed? You're agreeing, and it has to be an unambiguous. Sending the data outsids the EU? Explicit checkbox.

Is it absurd? Yes

[–] tpmoney 10 hours ago
> Your own data processed on your device, it's fine. Your own data uploaded to be processed?

Ok, but that seems to contradict your original assertion that it doesn't matter where the data is processed. The processes we're talking about run on your computer, processing data about you so that the services your OS provides can use that data to make the services work. That sounds a lot to me like "your own data processed on your device"

[–] semiquaver 13 hours ago
Your uninformed opinion about what the GDPR requires is absurd, yes.

Fortunately your opinion bears no resemblance to reality, so the absurdity is confined to inside your head (except to the extent it leaks onto message boards, as here)

[–] jen20 1 hour ago
> Data collection is still data collection, it doesn't matter whether I am the one processing that data or a third party

It absolutely matters who collects or processes for who must be GDPR compliant.

[–] 1123581321 10 hours ago
You should admit it’d be a bit silly to give notice to yourself that you are processing your own data!