Hacker News
points by tpmoney 14 hours ago | 0 comments
How far does this go? Are the Bayesian spam filters that email clients have had for years that use your own classifications GDPR violations because they collect data about what you do or don’t mark as spam? Is your browser a GDPR violation because it collects data about your system that can be used to fingerprint you? Does your OS violate the GDPR when it displays your most recently accessed files in a file picker or as first suggestions when you search for something? Is the SMART monitoring built into your drives a GDPR violation? My understanding of the GDPR is that it applies to data the company is collecting about you. If the company never gets the data in the first place, then they haven’t collected it.
[–] 4thguy 13 hours ago
1. Spam filters. No, the data was collected explicitly for the spam filter to work. Anything else? Not unless you consent to it. 2. Browser collection. The browser itself? There's an agreement when installing it. The websites? There's the cookie banners. 3. OS. Is it your data? No permission needed. Your device, your data. Other people's data? Unclear. Depends on what you told the person when you collected said data. 4. SMART. I don't know a lot about how it works.

I was talking about the data you collect. Your own data processed on your device, it's fine. Your own data uploaded to be processed? You're agreeing, and it has to be an unambiguous. Sending the data outsids the EU? Explicit checkbox.

Is it absurd? Yes

[–] tpmoney 10 hours ago
> Your own data processed on your device, it's fine. Your own data uploaded to be processed?

Ok, but that seems to contradict your original assertion that it doesn't matter where the data is processed. The processes we're talking about run on your computer, processing data about you so that the services your OS provides can use that data to make the services work. That sounds a lot to me like "your own data processed on your device"

[–] semiquaver 13 hours ago
Your uninformed opinion about what the GDPR requires is absurd, yes.

Fortunately your opinion bears no resemblance to reality, so the absurdity is confined to inside your head (except to the extent it leaks onto message boards, as here)