Notices

1. Aral Balkan (aral@mastodon.ar.al)'s status on Tuesday, 23-Oct-2018 08:53:10 CEST Aral Balkan

   Not honoring Do Not Track (DNT) is a #GDPR violation. If you receive a DNT signal, you must turn off all tracking. Furthermore, as the person has made their choice explicit and clear, you must not ask them again (via popovers, modals, etc.)

   How do we get this enforced. The first part seems like it is already covered by GDPR. Would the second half we enforceable under the current framework?

   Thoughts?

   • Fitheach (fitheach@mstdn.io)'s status on Tuesday, 23-Oct-2018 09:09:24 CEST Fitheach

     in reply to

     @aral
     Make a complaint to your country's equivalent of the Information Commissioner:
     https://ico.org.uk/make-a-complaint/your-personal-information-concerns/

     Multiple compaints in multiple EU states wouldn't be a bad thing.

     Aral Balkan repeated this.
   • alan@mastodon.technology's status on Tuesday, 23-Oct-2018 10:57:01 CEST alan

     in reply to

     @aral the EU DPA should make available an open endpoint that can be called to dump whatever breach automatically if a DNT request is not honored or has the issues you explained

     Aral Balkan repeated this.
   • map witch ebel ⛧ ?‍♀️?️? (ebel@moytura.org)'s status on Tuesday, 23-Oct-2018 14:11:48 CEST map witch ebel ⛧ ?‍♀️?️?

     in reply to

     @aral Using the DNT header is a great idea!

     One approach: Set this header, then access any websites. Don't click any 'agree' nonsense. Then prove that they tracked you, probably by making a data protection access request to see all data they have on you.

     Then report that to your local Data Protection Authority, and try to get them to make a precedent. I think (due to the #GDPR), non-gov orgs can sue companies, rather than needing a DPA (cf. noyb)

     Aral Balkan repeated this.
   • Dartigen the Eternally Tired (dartigen@mastodon.social)'s status on Wednesday, 24-Oct-2018 00:58:34 CEST Dartigen the Eternally Tired

     in reply to

     @aral I'd assume you would need to contact the hosting country's equivalent of the Information Commisioner/Communications and Media Authority/etc (the government department that deals with the Internet, basically).

     It probably wouldn't hurt to also contact your government's equivalent department.

     (I have one website I need to report - it not only doesn't honour DNT, its functionality actually breaks completely if you have DNT settings on.)

     Aral Balkan repeated this.