#gdpr

@navi@social.vlhl.dev @domi@donotsta.re @ska@social.treehouse.systems I predicted the storm, as well as a systemd-aged, as well as the #GDPR angle, over a fortnight ago. It took less than a day from my post for the first person, in reply, to propose an actual such #AgeVerification dæmon. https://mastodonapp.uk/@JdeBP/116156028746782578 This clearly model legislation is also slightly different in different states, as at least two legislatures amended the original bill. Which is going to cause further problems. https://mastodonapp.uk/@JdeBP/116176048755057656 #ColoradoLaw #IllinoisLaw #CaliforniaLaw #USLaw #Unix

I foresee:

1. #Debian eventually following #MidnightBSD's lead and cutting #California off from #FreeSoftware; after lengthy mailing list discussions where at least one person tries to deny with convoluted nonsense the plain reading of the statute.

2. A storm when someone points out that the #MobaXTerm version of APT isn't exempt, nor is RPM. (Goodness knows what IBM is going to do.)

3. An even bigger storm when someone adds an 'age' field to systemd's JSON User Records, to be enforced and served out over Desktop Bus via a systemd-aged service or some such. Much fun if that someone comes from a #GDPR country.

4. Some nutter taking a Linux distribution to court because it doesn't enable developers to control whether 16-year-olds can install rustc and busybox.

#CaliforniaLaw #Unix #rust #USLaw #AgeVerification #FreeBSD #OpenBSD #NetBSD

US Supreme Court just blew up EU-US Data Transfers https://noyb.eu/en/us-supreme-court-just-blew-eu-us-data-transfers #gdpr #dsgvo #noyb #privacy

RE: https://mastodon.ar.al/@aral/117330246532210453 #call2action #legislation #proposals #zeitgeist #humanRights #democracy ["Use of personal data 'in the context of AI" should automatically be lawful. "Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens 'in the context' of AI." Schrems: *“Under these proposals, the profits of AI companies would trump European’s fundamental right to privacy.”*] #ireland #eu #BigTech #GDPR #AI #privacy

Ireland = Big Tech’s bitch EU = ? “AI: EU Member States plan ‘digital expropriation’ of Europeans in the interest of AI companies In a leaked document, the Irish Presidency proposes to EU Member States that the interest of OpenAI, Anthropic, Google, Meta and SpaceX to make profits should take precedence over the fundamental right to data protection. Use of personal data ‘in the context of AI’ should automatically be lawful. There seems to be wide informal agreement by many Member States. In particular, Big Tech would be able to use all personal data collected over the past decades with virtually no restrictions, as long as this happens ‘in the context’ of AI.” – @noybeu@mastodon.socialhttps://noyb.eu/en/ai-eu-member-states-plan-digital-expropriation-europeans-interest-ai-companies Hey, @EUCommission@ec.social-network.europa.eu, you Big Tech’s bitch too? Shall we just do away with all this “human rights” and “democracy” malarkey and let you guys breathe a little? #ireland #eu #BigTech #GDPR #AI #privacy #humanRights #democracy

EBCDIC is incompatible with GDPR https://shkspr.mobi/blog/2021/10/ebcdic-is-incompatible-with-gdpr/ Welcome to acronym city! The Court of Appeal of Brussels has made an interesting ruling. A customer complained that their bank was spelling the customer's name incorrectly. The bank didn't have support for diacritical marks. Things like á, è, ô, ü, ç etc. Those accents are common in many languages. So it was a little surprising that the bank didn't support them. The bank refused to spell their customer's name correctly, so the customer raised a GDPR complaint under Article 16. The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Cue much legal back and forth. The bank argued that they simply couldn't support diacritics due to their technology stack. Here's their argument (in Dutch - my translation follows) Bank X also explained that the current customer data management application was launched in 1995 and is still running on a US manufactured mainframe system. This system only supported EBCDIC ("extended binary-coded decimal interchange code"). This is an 8-bit standard for storing letters and punctuation marks, developed in 1963-1964 by IBM for their mainframes and AS/400 computers. The code comes from of the use of punch cards and only contains the following characters… (Emphasis added.) EBCDIC is an ancient (and much hated) "standard" which should have been fired into the sun a long time ago. It baffles me that it was still being used in 1995 - let alone today. Look, I'm not a lawyer (sorry mum!) so I've no idea whether this sort of ruling has any impact outside of this specific case. But, a decade after the seminal Falsehoods Programmers Believe About Names essay - we shouldn't tolerate these sorts of flaws. Unicode - encoded as UTF-8 - just works. Yes, I'm sure there are some edge-cases. But if you can't properly store human names in their native language, you're opening yourself up to a lawsuit. Source GDPRhub - 2019/AR/1006 DanceReactions Marie ʕʘᴥʘʔ Julien @mariejulienTrès intéressant ! Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 40💬 2🔁 011:54 - Wed 20 October 2021 Grumpy Nat 🇨🇭🇧🇷🇲🇫 @Nat_KeelyHâte de mettre en justice tous les sites et autres compagnies qui ont décidé que le fait que j'ai un accent dans mon nom de famille soit source de bug (avec évidemment un message d'erreur qui n'a rien à voir. Histoire de bien pas comprendre pourquoi ça marche pas) Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 3💬 0🔁 010:43 - Wed 20 October 2021 Lays Y. M. Farra @LYMFHSRLa France va sortir de l'UE juste pour que leur état-civil et autres administrations puissent continuer à ruiner la vie de quelqu'un parce qu'il a un tilde dans son nom Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 9💬 0🔁 013:38 - Wed 20 October 2021 KristoferA 🌏 @KristoferADoes this mean that Z̷̡̧̢̰͓̪͖̭͙̰̣̱̬̹̙̜̪̣̏̿̏̋͑́̒͑́̒̿̇̈̍̇̌͝͝a̵̡̧͍̘̮̤̙̹͙̦̙͙͖͓̥̟̦͔͒̇̊̊̔̓́͒́̌̈́̑͋̏̏̏̚͘͝͠͝l̶͉̯̱͇̭̭̉̉̈́̿͐̽̒̎̽͌̚͜ģ̸̧̛͙̩̹̰̤̱̖̘̻̪̻̮̫̟̙̲͍̰̻͕̗̫̿̆̃́͗̽̊̽̌̔̂͂̈͊̐̈́̈̈́̈̓̆͌̑́̕͜ǫ̶̢̹̥̮̟͍̔̑̔̽ can finally open a bank account? Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 16💬 0🔁 013:10 - Wed 20 October 2021 Bastien Nocera @hadessukNext up, I’m suing La Poste for still using ISO-8859-1 when printing labels. Poor “Frédéric” I recently sent a game to… Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 7💬 0🔁 016:08 - Wed 20 October 2021 Michael Büker 🇺🇦 @emtiuEine Erschütterung der Macht, als würden Millionen Banken-ITler in panischer Angst aufschreien und dann verstummen. Terence Eden is on Mastodon @edentThis is interesting. A bank claimed it couldn't use diacritics in a customer's name due to technical limitations. Customer sued… and won! Your name is personal data, and GDPR says it should be recorded accurately.❤️ 1,143💬 0🔁 49407:53 - Wed 20 October 2021❤️ 25💬 2🔁 006:13 - Thu 21 October 2021 #gdpr #name #unicode

#Google fined €403 million over location data #privacy violations https://www.bleepingcomputer.com/news/security/google-fined-403-million-over-location-data-privacy-violations/ #Ireland #DPC #GDPR

🤮 EU Member States propose a #ReverseRobinHood: Take personal data from Millions of people and give it to the US-Billionaires. Data gathering for "AI processing" made automatically legal under the #GDPR. #DigitalLandGrab https://www.irishtimes.com/business/2026/09/21/ai-data-land-grab-looms-amid-proposed-digital-changes/

#GDPR & #AI - Irish EU Presidency proposes that "AI trumps the GDPR" in new leaked documents. This is nothing but the #DigitalExpropriation of Europeans on behalf of Big Tech.. 😣 https://noyb.eu/en/ai-eu-member-states-plan-digital-expropriation-europeans-interest-ai-companies

1/3 🚨 EU governments could be just days away from agreeing to a deal on the #DigitalOmnibus on Data that would weaken some of the basic protections people rely on under the #GDPR such as knowing who is using their data and why, being able to ask what data a company holds about them, and objecting to certain uses or expecting it to be kept secure. Two things are especially worrying... 🧵

I really miss the time when the #eu @EUCommission@ec.social-network.europa.eu was still focused on, or at least respecting its peoples #privacy. I really liked the idea they tried to achieve with the #gdpr. Now, only a few months after #chatcontrol "we need to read all of your private messages" ruling, we get the #eukidsact "You need to identify yourself when using anything on the internet" ruling. I miss the old EU

Personally, I’m more interested in being able to process personal data locally, which is legally impossible online. #GDPR

@revk@toot.me.uk Good point! You've sent me to a search engine. The law seems to be different for fleet operators and private individuals. Apparently there's a narrow exemption for domestic purposes, which lets you use #dashcam footage for a police report or an insurance claim, but that exemption evaporates if you share the video on YouTube or social media. Fleet operators, in contrast, have to comply with #GDPR in all its majesty. @anon_opin@mastodon.social @mikecox@mastodon.iow.social

Salutare tuturor! 👋 #Introduction Sunt Marius Vicențiu Colțuc, avocat fondator la Cabinet de Avocat Colțuc (București). Postez analize doctrinare, jurisprudență și aspecte practice din: 🔹 Executări silite & Contestații (Decizia ÎCCJ 19/2018, prescripții) 🔹 Drept bancar & Clauze abuzive 🔹 Protecția datelor (#GDPR), dreptul la uitare și #LegalTech 🔗 Resource Hub: https://coltuc.ro 📲 Contact direct (WhatsApp): +40745150894 #Lawyer #Romania #Jurisprudence #Legal #Fediverse #Privacy

Emma, the doctor's AI receptionist, doesn't understand security https://floorjellyboot.infinityfree.io/?u=/2026/09/05/emma-the-gps-ai-receptionist-doesnt-understand-yorkshire-or-security/ #ai #security #infosec #gdpr #confidentiality #vibecoding #codinghorrors #medicine #nhs #uknews #ukpolitics

It is not often that an old cynic like me is taken by surprise. But this is exactly what happened yesterday when I browsed the Business Post 's "Top 100 Movers and Shakers in Irish Tech" list to see my face looking back at me. I was delighted to be included in this list in the "the cyber security specialists keeping us safe" list. Congrats to everyone else who is included in the list. I am indeed in excellent company :) #cybersecurity #GDPR #Cyber https://www.businesspost.ie/tech/the-connected-100-the-cyber-security-specialists-keeping-us-safe/

@Tutanota@mastodon.social You don't need a cookie banner if you don't intend to spy on users. #GDPR

Europe’s AI labeling and transparency rules are now in effect The EU made some AI labels that companies can use instead of designing their own. | Image: The European Commission / The Verge The European Union has ushered in some additional rules that aim to make it easier for peopl… https://www.theverge.com/ai-artificial-intelligence/974571/eu-ai-act-transparency-labels-rules-deepfakes #Tech #Technology #AI #GDPR #Transparency [The Verge]

What is PII? The term comes from United States federal practice. The most cited formulation appears in NIST Special Publication 800-122, published April 2010, which frames PII as information that can be used to distinguish or trace an individual’s identity, either alone or combined with other linkable information. Does it land different within GDPR ? #GDPR #privacy #data #EU #EDPD #dataprotection https://privacyinsightsolutions.com/blog/what-is-pii-personal-data-gdpr

New paper: The problems with "sensitive data" in EU law - and whether, or when, location data should be considered to constitute such data by Douwe Korff :: SSRN https://papers.ssrn.com/sol3/papers.cfm?abstract_id=7205278 #GDPR #sensitivedata #locationdata #privacy #Datenschutz #geolocation