(320,5,'2019-02-26 20:48:40','2019-02-26 20:48:40','<!-- wp:paragraph -->\n<p>Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Article 6(1) of the GDPR</strong> sets out the conditions that must be met for the processing of personal data to be lawful. They are:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(a) the data subject has given <strong>consent</strong> to the processing of their personal data for one or more specific purposes;&nbsp;</em><br><em>(b) processing is necessary for the performance of a <strong>contract</strong> to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;&nbsp;</em><br><em>(c) processing is necessary for compliance with a <strong>legal obligation</strong> to which the controller is subject;&nbsp;</em><br><em>(d) processing is necessary in order to protect the <strong>vital interests</strong> of the data subject;&nbsp;</em><br><em>(e) processing is necessary for the performance of a task carried out in the <strong>public interest</strong> or in the exercise of official authority vested in the controller;&nbsp;</em><br><em>(f) processing is necessary for the purposes of the <strong>legitimate interests</strong> pursued by a controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. This shall not apply to processing carried out by public authorities in the performance of their tasks.</em><br>These conditions are all equally valid, regardless the order of appearance. Organisations should assess which of these grounds are most appropriate for different processing activities and then fulfil any further requirements the GDPR sets out for these conditions (GDPR Article 5).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Many organisations have been wrongly advised to opt for consent. The new regulation that entered into force on May 2018 requires a higher standard of consent. That explains the deluge of re-consent emails sent out around May last year. The other inconvenient of consent is the requirement to keep a register of all granted consents, with the risk that at anytime the data subject could withdraw its consent to processing. Imagine an individual giving consent for his image to be used in a commercial movie. at anytime, this person could revise its position and withdraw its consent, The organisation will have to pull out the movie. That should explain why consent is not always the most appropriate basis.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-legitimate-interests/\">The UK ICO</a> website explain : \"<em>Legitimate interests is the most flexible of the six lawful bases. It is not focused on a particular purpose and therefore gives you more scope to potentially rely on it in many different circumstances.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>It may be the most appropriate basis when:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the processing is not required by law but is of a clear benefit to you or others;</em></li><li><em>there’s a limited privacy impact on the individual;</em></li><li><em>the individual should reasonably expect you to use their data in that way; and</em></li><li><em>you cannot, or do not want to, give the individual full upfront control (ie consent) or bother them with disruptive consent requests when they are unlikely to object to the processing.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>However, it must be clear that Legitimate Interest is not simply the interest of the organisation. It is framed within strict conditions. A three part assessment that needs to be carefully conducted and communicated to the data subject at the time the data is collected. The jurisprudence has based the conditions of necessity and the respect of rights and freedoms of individuals.  Legitimate Interest, when validly demonstrated, can exempt from requesting formal consent. In a way, consent can be implicite as the data controller will be processing the data the way it is expected to act. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>You still need to show that your processing passes the necessity and balancing tests</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>You may also need to be more specific about your purposes for some elements of your processing in order to show that processing is necessary and to weigh the benefits in the balancing test. For example, if you use profiling to target your marketing.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>When looking at the balancing test, you should also consider factors such as:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>whether people would expect you to use their details in this way;</em></li><li><em>the potential nuisance factor of unwanted marketing messages; and</em></li><li><em>the effect your chosen method and frequency of communication might have on more vulnerable individuals.</em>\"</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Rowenna Fielding - a <em>\"Professional Data Protection Nerd, Information Governance\"</em> as she describes herself on her Linkedin profile - published a very useful reminder that hopefully will help to clarify some of the misinformation around Legitimate Interest. I could not say it any better, so I reproduce this here with her authorisation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;10 Legitimate Interests Lessons for Marketers :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. Just because you\'re interested, doesn\'t make it legitimate.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. You can\'t use LI to avoid getting consent when you suspect the answer will be \"No\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> 3. Whether LI can be applied depends on your own assessment of what you\'re doing, why and how - which you will be expected to justify and defend. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4. LI is not \'unclear\' or \'ambiguous\'; it requires thinking to be done and a decision to be made. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>5. Publish your Legitimate Interests Assessments (LIA) if you anticipate/plan to reject objections to processing. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>6. If a law says you have to get consent for a processing activity, then forget about LI. You can\'t use it. Move on. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>7. LI is only a valid lawful basis for processing personal data if you\'re adhering to all of the principles. It\'s not a loophole around compliance. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>8. If your LIA is post-hoc rationalisation of something you won\'t consider ceasing to do even though you suspect it\'s a bit dodgy; then you wasted your time. Just make sure you have funds set aside to deal with complaints, regulatory action and reputation damage when you get found out. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>9. The ICO is not responsible for your continuing professional development 10. No-one else can do your thinking for you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The same way that consent is not a universal panacea, Legitimate Interest has to be balanced and where there is a contract to justify the processing of personal data it can be better suited. The UK ICO has an <a href=\"https://ico.org.uk/for-organisations/resources-and-support/lawful-basis-interactive-guidance-tool\">online interactive tool</a> that helps select the most appropriate lawful base of processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Contact us at Data@DataRainbow.eu if you need further assistance to take you trough some of these complexities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','How to Understand the GDPR Legitimate Interest','Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.','inherit','closed','closed','','267-revision-v1','','','2019-02-26 20:48:40','2019-02-26 20:48:40','',267,'https://datarainbow.eu/2019/02/26/267-revision-v1/',0,'revision','',0),(322,5,'2019-02-26 20:52:13','2019-02-26 20:52:13','<!-- wp:paragraph -->\n<p>Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Article 6(1) of the GDPR</strong> sets out the conditions that must be met for the processing of personal data to be lawful. They are:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(a) the data subject has given <strong>consent</strong> to the processing of their personal data for one or more specific purposes;&nbsp;</em><br><em>(b) processing is necessary for the performance of a <strong>contract</strong> to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;&nbsp;</em><br><em>(c) processing is necessary for compliance with a <strong>legal obligation</strong> to which the controller is subject;&nbsp;</em><br><em>(d) processing is necessary in order to protect the <strong>vital interests</strong> of the data subject;&nbsp;</em><br><em>(e) processing is necessary for the performance of a task carried out in the <strong>public interest</strong> or in the exercise of official authority vested in the controller;&nbsp;</em><br><em>(f) processing is necessary for the purposes of the <strong>legitimate interests</strong> pursued by a controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. This shall not apply to processing carried out by public authorities in the performance of their tasks.</em><br>These conditions are all equally valid, regardless the order of appearance. Organisations should assess which of these grounds are most appropriate for different processing activities and then fulfil any further requirements the GDPR sets out for these conditions (GDPR Article 5).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Many organisations have been wrongly advised to opt for consent. The new regulation that entered into force on May 2018 requires a higher standard of consent. That explains the deluge of re-consent emails sent out around May last year. The other inconvenient of consent is the requirement to keep a register of all granted consents, with the risk that at anytime the data subject could withdraw its consent to processing. Imagine an individual giving consent for his image to be used in a commercial movie. at anytime, this person could revise its position and withdraw its consent, The organisation will have to pull out the movie. That should explain why consent is not always the most appropriate basis.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-legitimate-interests/\">The UK ICO</a> website explain : \"<em>Legitimate interests is the most flexible of the six lawful bases. It is not focused on a particular purpose and therefore gives you more scope to potentially rely on it in many different circumstances.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>It may be the most appropriate basis when:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the processing is not required by law but is of a clear benefit to you or others;</em></li><li><em>there’s a limited privacy impact on the individual;</em></li><li><em>the individual should reasonably expect you to use their data in that way; and</em></li><li><em>you cannot, or do not want to, give the individual full upfront control (ie consent) or bother them with disruptive consent requests when they are unlikely to object to the processing.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>However, it must be clear that Legitimate Interest is not simply the interest of the organisation. It is framed within strict conditions. A three part assessment that needs to be carefully conducted and communicated to the data subject at the time the data is collected. The jurisprudence has based the conditions of necessity and the respect of rights and freedoms of individuals.  Legitimate Interest, when validly demonstrated, can exempt from requesting formal consent. In a way, consent can be implicite as the data controller will be processing the data the way it is expected to act. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Extracts of the UK ICO website, for processing for marketing purposes to be lawful : \"<em>You still need to show that your processing passes the necessity and balancing tests</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>You may also need to be more specific about your purposes for some elements of your processing in order to show that processing is necessary and to weigh the benefits in the balancing test. For example, if you use profiling to target your marketing.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>When looking at the balancing test, you should also consider factors such as:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>whether people would expect you to use their details in this way;</em></li><li><em>the potential nuisance factor of unwanted marketing messages; and</em></li><li><em>the effect your chosen method and frequency of communication might have on more vulnerable individuals.</em>\"</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Rowenna Fielding - a <em>\"Professional Data Protection Nerd, Information Governance\"</em> as she describes herself on her Linkedin profile - published a very useful reminder that hopefully will help to clarify some of the misinformation around Legitimate Interest. I could not say it any better, so I reproduce this here with her authorisation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;10 Legitimate Interests Lessons for Marketers :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. Just because you\'re interested, doesn\'t make it legitimate.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. You can\'t use LI to avoid getting consent when you suspect the answer will be \"No\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> 3. Whether LI can be applied depends on your own assessment of what you\'re doing, why and how - which you will be expected to justify and defend. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4. LI is not \'unclear\' or \'ambiguous\'; it requires thinking to be done and a decision to be made. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>5. Publish your Legitimate Interests Assessments (LIA) if you anticipate/plan to reject objections to processing. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>6. If a law says you have to get consent for a processing activity, then forget about LI. You can\'t use it. Move on. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>7. LI is only a valid lawful basis for processing personal data if you\'re adhering to all of the principles. It\'s not a loophole around compliance. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>8. If your LIA is post-hoc rationalisation of something you won\'t consider ceasing to do even though you suspect it\'s a bit dodgy; then you wasted your time. Just make sure you have funds set aside to deal with complaints, regulatory action and reputation damage when you get found out. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>9. The ICO is not responsible for your continuing professional development 10. No-one else can do your thinking for you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The same way that consent is not a universal panacea, Legitimate Interest has to be balanced and where there is a contract to justify the processing of personal data it can be better suited. The UK ICO has an <a href=\"https://ico.org.uk/for-organisations/resources-and-support/lawful-basis-interactive-guidance-tool\">online interactive tool</a> that helps select the most appropriate lawful base of processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Contact us at Data@DataRainbow.eu if you need further assistance to take you trough some of these complexities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','How to Understand the GDPR Legitimate Interest','Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.','inherit','closed','closed','','267-revision-v1','','','2019-02-26 20:52:13','2019-02-26 20:52:13','',267,'https://datarainbow.eu/2019/02/26/267-revision-v1/',0,'revision','',0),(324,5,'2019-03-08 21:17:23','2019-03-08 21:17:23','<!-- wp:paragraph -->\n<p><a href=\"https://www.handelsblatt.com/politik/deutschland/datenschutzgrundverordnung-behoerden-verhaengen-erste-bussgelder-wegen-verstoessen-gegen-dsgvo/23872806.html?utm_term=Autofeed&amp;social=tw-hb_hk-li-ne-or-&amp;utm_medium=Social&amp;utm_content=hb_hk&amp;utm_source=Twitter&amp;ticket=ST-3132650-6BS3JkvjeZRSOdTaQcJa-ap4#Echobox=1547811383\">The Handlsblatt</a> report the authorities first fines for violations of GDPR (DSGVO)  by the various DPAs in the German Federal States. :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Nationwide, fines have been issued in 41 cases because of DSGVO violations. Especially small companies are apparently unprepared for the new rules. \"<em>Most fines were imposed by North Rhine-Westphalia (33), followed by Hamburg (3) and Baden-Württemberg and Berlin (2 each) and Saarland (1). Alone at the Bavarian State Office for Data Protection Supervision (BayLDA), which monitors the observance of data protection law in private business enterprises, in freelancers, in associations and associations as well as on the internet, currently 85 fine proceedings are under the GDPR.</em>\" </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>The large number of consultation requests and the explicit complaints indicate that there has been an increased awareness.</em>\" In this respect one could say: \"<em>The DSGVO has been effective with regard to those affected.</em>\" There are serious deficiencies in the data processing information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>According to the Hamburg data protection Authority, Johannes Caspar, \"<em>a lot has changed for the better in companies as well</em>\".&nbsp;Awareness of data protection and understanding of one\'s own responsibility for the processing of data has increased significantly.&nbsp;For example regarding the appointment of data protection officers or the creation of processing directories and data protection statements.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>In this respect, this improved awareness is certainly one of the most important changes by the GDPR</em>,\" according to Johannes Caspar.&nbsp;\"<em>The huge increase in consultancy shows the great need of companies to behave in compliance with data protection</em>,\" said BayLDA President Thomas Kranig .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>With regard to global Internet companies, supervisors must be able to enforce data protection in accordance with the GDPR and, where necessary, initiate and implement fast and effective procedures,</em>\" Johannes Caspar said.&nbsp;It will show whether the European Data Protection Board and the national authorities represented therein are able to ensure the uniform and effective protection of the rights and freedoms of stakeholders in this field.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For the Bavarian State Commissioner for&nbsp;<a href=\"https://www.handelsblatt.com/themen/datenschutz\">Data Protection</a>,&nbsp;Thomas Petri, it was important that companies such as clinics or transport companies,&nbsp;<a href=\"https://www.handelsblatt.com/unternehmen/it-medien/studie-zur-it-sicherheit-viele-firmen-sind-bei-cyberangriffen-konzeptlos/23178588.html\">adapted as soon as possible their privacy management.</a> He considers \"<em>Sometimes fines can inhibit rather than promote fines,</em>\" while at the same time he warned: \"<em>I should not rely unconditionally on my restraint.</em>\" He had already warned a number of clinics for significant violations that they would result in fines.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It was about&nbsp;<a href=\"https://www.handelsblatt.com/unternehmen/it-medien/emotet-angriffe-cybersicherheit-ist-noch-immer-selten-chefsache-das-kann-sich-raechen/23732342.html\">\"significant technical and organizational deficiencies.\"</a>&nbsp;In Brandenburg, it was said in the \"conversion phase\" consultations would be more effective than the \"immediate application of the tightened fine rules\".&nbsp;However, fines would \"make use of them in the future,\" emphasized data protection officer Dagmar Hartge.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Data Protection Authority of Lower Saxony is currently conducting a \"cross-sectional inspection\" of 50 companies in Lower Saxony for the GDPR implementation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We can only agree with the Berlin data protection officer Maja Smoltczyk, \"<em>The General Data Protection Regulation represents a first important step in helping to safeguard our freedoms</em>\" .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This publication is licensed under a Creative Commons Attribution 4.0 International . More information on the licence can be found on http://creativecommons.org/licenses/by/4.0/</p>\n<!-- /wp:paragraph -->','Increasing Fines Expected from German DPAs','In Germany, nationwide, fines have been issued in 41 cases because of GDPR violations. Especially small companies are apparently unprepared for the new rules.','inherit','closed','closed','','307-revision-v1','','','2019-03-08 21:17:23','2019-03-08 21:17:23','',307,'https://datarainbow.eu/2019/03/08/307-revision-v1/',0,'revision','',0),(325,5,'2019-03-08 21:18:59','2019-03-08 21:18:59','<!-- wp:paragraph -->\n<p>Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Article 6(1) of the GDPR</strong> sets out the conditions that must be met for the processing of personal data to be lawful. They are:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(a) the data subject has given <strong>consent</strong> to the processing of their personal data for one or more specific purposes;&nbsp;</em><br><em>(b) processing is necessary for the performance of a <strong>contract</strong> to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;&nbsp;</em><br><em>(c) processing is necessary for compliance with a <strong>legal obligation</strong> to which the controller is subject;&nbsp;</em><br><em>(d) processing is necessary in order to protect the <strong>vital interests</strong> of the data subject;&nbsp;</em><br><em>(e) processing is necessary for the performance of a task carried out in the <strong>public interest</strong> or in the exercise of official authority vested in the controller;&nbsp;</em><br><em>(f) processing is necessary for the purposes of the <strong>legitimate interests</strong> pursued by a controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. This shall not apply to processing carried out by public authorities in the performance of their tasks.</em><br>These conditions are all equally valid, regardless the order of appearance. Organisations should assess which of these grounds are most appropriate for different processing activities and then fulfil any further requirements the GDPR sets out for these conditions (GDPR Article 5).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Many organisations have been wrongly advised to opt for consent. The new regulation that entered into force on May 2018 requires a higher standard of consent. That explains the deluge of re-consent emails sent out around May last year. The other inconvenient of consent is the requirement to keep a register of all granted consents, with the risk that at anytime the data subject could withdraw its consent to processing. Imagine an individual giving consent for his image to be used in a commercial movie. at anytime, this person could revise its position and withdraw its consent, The organisation will have to pull out the movie. That should explain why consent is not always the most appropriate basis.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-legitimate-interests/\">The UK ICO</a> website explain : \"<em>Legitimate interests is the most flexible of the six lawful bases. It is not focused on a particular purpose and therefore gives you more scope to potentially rely on it in many different circumstances.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>It may be the most appropriate basis when:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the processing is not required by law but is of a clear benefit to you or others;</em></li><li><em>there’s a limited privacy impact on the individual;</em></li><li><em>the individual should reasonably expect you to use their data in that way; and</em></li><li><em>you cannot, or do not want to, give the individual full upfront control (ie consent) or bother them with disruptive consent requests when they are unlikely to object to the processing.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>However, it must be clear that Legitimate Interest is not simply the interest of the organisation. It is framed within strict conditions. A three part assessment that needs to be carefully conducted and communicated to the data subject at the time the data is collected. The jurisprudence has based the conditions of necessity and the respect of rights and freedoms of individuals.  Legitimate Interest, when validly demonstrated, can exempt from requesting formal consent. In a way, consent can be implicite as the data controller will be processing the data the way it is expected to act. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Extracts of the UK ICO website, for processing for marketing purposes to be lawful : \"<em>You still need to show that your processing passes the necessity and balancing tests</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>You may also need to be more specific about your purposes for some elements of your processing in order to show that processing is necessary and to weigh the benefits in the balancing test. For example, if you use profiling to target your marketing.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>When looking at the balancing test, you should also consider factors such as:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>whether people would expect you to use their details in this way;</em></li><li><em>the potential nuisance factor of unwanted marketing messages; and</em></li><li><em>the effect your chosen method and frequency of communication might have on more vulnerable individuals.</em>\"</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Rowenna Fielding - a <em>\"Professional Data Protection Nerd, Information Governance\"</em> as she describes herself on her Linkedin profile - published a very useful reminder that hopefully will help to clarify some of the misinformation around Legitimate Interest. I could not say it any better, so I reproduce this here with her authorisation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;10 Legitimate Interests Lessons for Marketers :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. Just because you\'re interested, doesn\'t make it legitimate.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. You can\'t use LI to avoid getting consent when you suspect the answer will be \"No\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> 3. Whether LI can be applied depends on your own assessment of what you\'re doing, why and how - which you will be expected to justify and defend. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4. LI is not \'unclear\' or \'ambiguous\'; it requires thinking to be done and a decision to be made. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>5. Publish your Legitimate Interests Assessments (LIA) if you anticipate/plan to reject objections to processing. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>6. If a law says you have to get consent for a processing activity, then forget about LI. You can\'t use it. Move on. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>7. LI is only a valid lawful basis for processing personal data if you\'re adhering to all of the principles. It\'s not a loophole around compliance. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>8. If your LIA is post-hoc rationalisation of something you won\'t consider ceasing to do even though you suspect it\'s a bit dodgy; then you wasted your time. Just make sure you have funds set aside to deal with complaints, regulatory action and reputation damage when you get found out. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>9. The ICO is not responsible for your continuing professional development 10. No-one else can do your thinking for you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The same way that consent is not a universal panacea, Legitimate Interest has to be balanced and where there is a contract to justify the processing of personal data it can be better suited. The UK ICO has an <a href=\"https://ico.org.uk/for-organisations/resources-and-support/lawful-basis-interactive-guidance-tool\">online interactive tool</a> that helps select the most appropriate lawful base of processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Contact us at Data@DataRainbow.eu if you need further assistance to take you trough some of these complexities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This publication is licensed under a Creative Commons Attribution 4.0 International<br>More information on the licence can be found <a href=\"http://creativecommons.org/licenses/by/4.0/\">here</a>. </p>\n<!-- /wp:paragraph -->','How to Understand the GDPR Legitimate Interest','Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.','inherit','closed','closed','','267-revision-v1','','','2019-03-08 21:18:59','2019-03-08 21:18:59','',267,'https://datarainbow.eu/2019/03/08/267-revision-v1/',0,'revision','',0),(326,5,'2019-03-08 21:19:29','2019-03-08 21:19:29','<!-- wp:paragraph -->\n<p>Very good analysis that unfortunately misses the Morrison’s case of vicarious liability where the Appeal judge expressly states the need for sufficient insurance policies are taken out in the event of \"Armageddon\".</p>\n<!-- /wp:paragraph -->','Insurability Of Fines And Penalties For Breaches Of The GDPR','','inherit','closed','closed','','266-revision-v1','','','2019-03-08 21:19:29','2019-03-08 21:19:29','',266,'https://datarainbow.eu/2019/03/08/266-revision-v1/',0,'revision','',0),(327,5,'2019-03-08 21:19:52','2019-03-08 21:19:52','<!-- wp:heading {\"level\":4} -->\n<h4></h4>\n<!-- /wp:heading -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>Data Security and Privacy interview of Tara Taubman-Bassirian by the Privacy Professor, Rebecca Herold, Tuesday at 2 PM Pacific<strong>January 22nd 2019: GDPR, Data Privacy Day and The Need for Privacy</strong><br></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.voiceamerica.com/promo/episode/112620\">Episode Description</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, with Rebecca.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":49} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-21-at-00.33.19.png\" alt=\"\" class=\"wp-image-49\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:heading -->\n<h2>Tara Taubman-Bassirian</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Tara Taubman-Bassirian is a French Lawyer based in the UK with expertise in areas of privacy, data protection, intellectual property and eCommerce. She has made a name for herself in several areas of the world, most notably the UK, France and the US. An early adopter of emerging technologies, Tara makes it her business to understand the challenges presented by regulations in this high connectivity era, which is how she has become a trusted adviser to individuals &amp; businesses navigating legal pathways to justice on the internet. Tara is very active in raising awareness of the EU General Data Protection Regulation (GDPR) &amp; advising businesses on the compliance requirements. Tara is a member of ICANN\'s NCUC &amp; is a volunteer mediator for Surrey Mediation where she extends community mediation to copyright conflict resolution. Tara co-founded Facebook group Fly A Kite with Rebecca. It is dedicated to eradicating cyber-bullying &amp; improving online security, something near &amp; dear to us both.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This publication is licensed under a Creative Commons Attribution 4.0 International<br>More information on the licence can be found <a href=\"http://creativecommons.org/licenses/by/4.0/\">here</a>. </p>\n<!-- /wp:paragraph -->','GDPR, Data Privacy Day and The Need for Privacy','','inherit','closed','closed','','47-revision-v1','','','2019-03-08 21:19:52','2019-03-08 21:19:52','',47,'https://datarainbow.eu/2019/03/08/47-revision-v1/',0,'revision','',0),(328,5,'2019-03-08 21:20:24','2019-03-08 21:20:24','<!-- wp:paragraph -->\n<p>In what is today the biggest fine under the GDPR, the French Data Protection Authority CNIL investigated Google Android transparency in Data processing. The investigation was consecutive to two class actions filed on the 25th of May 2018. One by the Austrian NGO Non Of Your Business (NOYB), another by the French La Quadrature du Net (LQDN). The complained have been partly answered as limited to the mobile Android Operating System. Still remain Youtube, Gmail and Google Search. This decision worth a close look up.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In its complaint, NOYB stated in particular that users of Android mobile devices are required to accept Google\'s privacy policy and general terms and conditions of service and that, failing such acceptance, they could not use their terminal.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The association LQDN complained that, regardless of the terminal used, Google does not have valid legal bases to implement the processing of personal data for purposes of behaviour analysis and advertising targeting.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>First  of all, the CNIL has shown high celerity to deal with the complaints.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>On 1st June 2018, the CNIL submitted the complaints to its European counterparts via the European information exchange system with a view to the designation of a possible lead authority in accordance with the provisions of Article 56 of the GDPR.</li><li>20 September 2018 : Decision to investigate the Android\'s data procession is taken; </li><li>on 21 September, an online test was carried out  to verify the compliance of any processing relating to the use of the operating system Android for mobile equipment, including the creation of a Google account.</li><li>24 and 25th September, the report was notified to GOOGLE LLC companies.&nbsp;and Google France SARL</li><li>28 September 28,  the two companies also received the aforementioned complaints by courier of the CNIL</li><li>2nd Octobre, Mr. François PELLEGRINI was appointed as rapporteur according to the article 47 French Data Protection law of January 6, 1978</li><li>22nd October, the reporter notified Google LLC&nbsp;and Google France a report detailing shortcomings relating to sections 6, 12 and 13 of the GDPR. The report suggested&nbsp;a fine of 50 million euros to be made public.&nbsp;</li><li>7 November 2018, Google requested a hearing from the rapporteur, </li><li>13 November the request was rejected .</li><li> On the same date, the company also made a request for closed doors and postponement of the meeting, </li><li>15 November the request was rejected.</li><li>22nd November, Google filed a written comments on the report.&nbsp;</li><li>7th December, the rapporteur replied to these observations.</li><li>11th December, Google, which had fifteen days from receipt of the rapporteur\'s to reply, requested to postpone the meeting and extend the deadline to produce new observations.&nbsp; </li><li>13th December , the request was accepted to postpone for two weeks - until January 7 - the deadline for filing these observations and to postpone the meeting to January 15, 2019.</li><li>4th January, Google filed new observations in response to those of the rapporteur.</li><li>All observations were reiterated orally during the meeting of 15 January 2019.</li><li>21st January the decision was made public.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>On the decision itself, Google argued the French CNIL should not be the competent Data Protection Authority.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on Article 55 (1) of the GDPR states: Each supervisory authority shall be competent to exercise the tasks and powers vested in it in accordance with this Regulation in the territory of the Member State to which it belongs.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 56 (1) of the GDPR provides: Without prejudice to Article 55, the supervisory authority of the principal place of business or of the sole place of business of the controller or processor shall have jurisdiction to act as lead supervisory authority for cross-border processing by that controller or processor, in accordance with the procedure laid down in Article 60.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google argued that the CNIL could not be competent to conduct this procedure and that it should have transmitted the complaints received to the Irish Data Protection Commission (DPC) the lead authority to deal with these cross-border complaints in accordance with Art 60 GDPR.&nbsp;Google Ireland Limited being its main establishment in the EU for some of the its cross-border processing, including those objects of the complaints.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Therefore, initial discussions turned around the competent authority as defined by the main establishment of the company. Google arguing Ireland to be its main establishment, the CNIL responding the main Administrative establishment is not the criteria. Based on Article 4 (16) of the RGPD&nbsp;and Recital 36 GDPR, the main establishment to consider should be based on objective criteria and should imply the effective and real exercise of management activities determining the main decisions as to the purposes and means of processing trough stable arrangements. The CNIL added that the determination should be analysed in concreto, according to objective criteria. The main establishment could therefore not necessarily correspond to the main designated administrative establishment.  The CNIL based its position on the WP article 29 guidance WP244 of 5th April 2017 \"<em>the central administration is the place where the decisions are made on the purposes and means of processing.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Deciding otherwise would result on forum shopping, says the CNIL. Google Ireland had no decisional power. Google Ireland Limited is not mentioned in the Company\'s Privacy Policy dated May 25, 2018 as the entity where the main decisions about the purposes and means of the processing are made. covered by the privacy policy presented to the user when creating his account, during the configuration of his mobile phone on Android. In fact Google had not either named any DPO in Ireland who would be in charge of the processing of personal data that it could implement in the European Union.&nbsp;It further notes that the Android operating system is developed solely by Google LLC.. Additionally, the company itself had indicated, by mail dated December 3, 2018 addressed to the DPC, that the transfer of responsibility of Google LLC.&nbsp;to Google Ireland Limited on certain processing of personal data concerning European citizens would be finalized on 31 January 2019. It later specified to update its confidentiality rules which will come into effect on 22 January 2019. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google\'s argument that a reorganisation both operational and organizational was underway to make the company Google Ireland Limited the controller for certain processing of personal data concerning European nationals, was in my view a mistake only proving that at the time of the compliant Google Ireland had no decisional power.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It also considers that the definition of principal place of business should be distinguished from that of controller. Arguing that if the European legislator had intended that the concept of principal place of business should be interpreted as the place where decisions concerning \'would have expressly indicated simply ignored the text of the Recital 36.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the absence of a principal establishment allowing the identification of a lead authority, the one stop shop did not apply, and the CNIL was competent to initiate this procedure and to exercise all of its powers under Article 58 of the GDPR.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is a very interesting analysis to determine the main establishment and the lead authority based on objective criteria and not a subjective decision favouring forum shopping. The decision dismisses the application of the GDPR’s one-stop-shop by holding that Google Ireland Limited is not Google’s main establishment in the EU. A rather strict interpretation of the concept of “main establishment”. With no main establishment in the EU, Google LLC could potentially be subject to enforcement by any supervisory authority in the EU where Google has an establishment, including France.&nbsp; </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Once the CNIL confirmed its competence, it goes into a detailed analysis of the transparency requirement and legitimate basis of processing. here after, a free translation is offered:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>2- On the Procedure</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google argued on the validity of the complaints. &nbsp;The CNIL responded that the question of the admissibility of the complaints could not affect the legality of the proceedings, as it could self-refer itself based on the findings made by its services.&nbsp;The CNIL had therefore a mission to supervise the application of the regulation and to ensure compliance with it and that it has, for this purpose, the power to carry out investigations, in accordance with Arti 57 1. a) and h) of the RGPD. In fact, the two associations had been mandated to represent the complaints under article 80 of the RGPD.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The second argument claiming that the proceedings breached its right to a fair trial according to Art 6 of the Convention for the Protection of Human Rights and Fundamental Freedoms that the rapport to his observations were addressed in French, sounded rather difficult to succeed. The CNIL responded to that any notification of a penalty report had to be in French based on a legal obligation laid down in Article 111-1 of the Code of relations between the public and the administration which provides that use of the French language is prescribed in the exchanges between the public and the administration, in accordance with the provisions of the law n ° 94-665 of August 4, 1994 relating to the use of the French language. Google has an establishment on the French territory with several hundred employees. Google had in any event sufficient material and human resources enabling it to ensure a translation of the documents in English in sufficient time to become acquainted with it and to make observations within the deadline.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In view of these elements, the Restricted Training considers that the company had in any event sufficient material and human resources enabling it to ensure a translation of the documents in English in sufficient time to become acquainted with it and to make observations in the the deadline fixed for it.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This point explains why it is important that the Organisations\' representative speak the language of the DPA.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Also the refusal to extend the time limit he was opposed to produce his first observations and limited the time available to prepare his defence.&nbsp;It also considers that the adjournment of the meeting as well as the additional time it was finally granted to produce its second observations were still not sufficient.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3.Over the scope of investigations</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google argued first of all that the rapporteur has confused the Android operating system and the Google account when they are separate services that implement different treatment activities. Then argued that the scope of control chosen by the CNIL - namely the creation of a Google account when setting up a new device using the Android operating system - is limited in that it only represents a case figure affecting 7% of users. Finally, it indicated that the findings were made on an older version of the Android operating system.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL did not disputed the existence of separate services, respectively related to the Android operating system and the Google Account, implementing different processing activities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It observed, however, that the facts covered by the investigations corresponded to the scenario chosen to carry out the on-line check, namely the journey of a user and the documents to which he could have accessed during the initial configuration of his mobile equipment using the Android operating system.&nbsp;This path included the creation of an account.&nbsp;These facts therefore related to the treatments covered by the privacy policy presented to the user when creating an account during the setting up of their mobile phone on Android.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Then, adding that if it was true that the user actually had the choice to create an account and has the opportunity to use some of the services without having to create an account, however, when setting up an Android device, the ability to create a Google account or connect to an existing account naturally appeared at the beginning of the setting process, without specific action of the user.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In any case, under Article 11.I.2 of the Data Protection Act, the CNIL has a broad discretion as to the scope of the controls it may undertake.&nbsp;A specific control scenario, such as that used in this case, may make it possible to make findings reflecting a more comprehensive privacy policy. The scope of the processing of personal data that is performed&nbsp;is therefore is irrelevant so is the version of the Android operating system since it appears from the documents provided by Google that the user\'s journey is similar in the newer version .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>4.On breach of transparency and information obligations</strong><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google infringed the GDPR for three main reasons: (1)&nbsp;<strong>lack of transparency&nbsp;</strong>(art. 5 GDPR); (2)&nbsp;<strong>insufficient information&nbsp;</strong>(art. 12 and 13 GDPR); and (3)&nbsp;<strong>invalid consent collection or lawfulness basis&nbsp;</strong>(art. 7 GDPR). The CNIL found the information Google provides when creating an account is not clearly accessible and therefore consent is not \'informed\' and explicitly obtained. Criticising pre-ticked boxes explicitly prohibited by the GDPR.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <strong>obligations of transparency</strong> resulted on Article 12 (1) GDPR that provides: \"<em>1.The controller shall take appropriate measures to provide any information referred to in&nbsp;</em><a href=\"http://www.privacy-regulation.eu/en/article-13-information-to-be-provided-where-personal-data-are-collected-from-the-data-subject-GDPR.htm\"><em>Articles 13</em></a><em>&nbsp;and 14 and any communication under&nbsp;</em><a href=\"http://www.privacy-regulation.eu/en/article-15-right-of-access-by-the-data-subject-GDPR.htm\"><em>Articles 15</em></a><em>&nbsp;to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child. The information shall be provided in writing, or by other means, including, where appropriate, by electronic means. When requested by the data subject, the information may be provided orally, provided that the identity of the data subject is proven by other means.\"&nbsp;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 13 (1) provides that:  <em>\"1.&nbsp;Where personal data relating to a data subject are collected from the data subject, the&nbsp;controller&nbsp;shall, at the time when personal data are obtained, provide the data subject with all of the following information:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(a)&nbsp;&nbsp;&nbsp; the identity and the contact details of the&nbsp;controller&nbsp;and, where applicable, of the&nbsp;controller\'s&nbsp;representative;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(b)&nbsp;&nbsp;&nbsp; the contact details of the data protection officer, where applicable;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(c)&nbsp;&nbsp;&nbsp; the purposes of the&nbsp;processing&nbsp;for which the personal data are intended as well as the legal basis for the&nbsp;processing;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(d)&nbsp;&nbsp;&nbsp; where the&nbsp;processing&nbsp;is based on point (f) of Article 6(1), the legitimate interests pursued by the&nbsp;controller&nbsp;or by a&nbsp;third party;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(e)&nbsp;&nbsp;&nbsp; the&nbsp;recipients or categories of&nbsp;recipients of the personal data, if any;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(f)&nbsp;&nbsp;&nbsp; where applicable, the fact that the&nbsp;controller&nbsp;intends to transfer personal data to a third country or&nbsp;international organisation&nbsp;and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article&nbsp;46 or 47, or the second subparagraph of Article&nbsp;49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google firstly considered that the Confidentiality rules and conditions of use, accessible when creating an account, constitutes first-level information in accordance with the EDPS Guidelines on Transparency within the meaning of the EU Regulation 2016 / 679 (WP260) of 25 May 2018. It states that the document provides a good overview of the treatments implemented and that the mention of the legal basis of these treatments does not have to be included in this first level information.&nbsp;Information about how long the data is kept is in the section Exporting and Deleting the Information in the Privacy Policy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google goes on to argue that the information of individuals must, in the light of sections 12 and 13 of the Regulations, be assessed on a global basis.&nbsp;In this regard, it states that the information it issues is also used, in addition to the documents entitled Confidentiality Rules and Conditions of Use, Privacy Policy and Terms of Use, through several other terms and conditions.&nbsp;Additional information messages may appear when creating an account under each of the privacy settings.&nbsp;In addition, an e-mail is sent to the user when an account is created, stating that: it can change the privacy and security settings of the Google account at any time,&nbsp;create reminders to check the privacy or security settings.&nbsp;This e-mail  contains clickable links to various setting tools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These other control tools, which are made available to the user after the creation of his account from the management interface of his account include for example a tool called check-up confidentiality that allows users to choose privacy settings that suit them, including custom ads, location history, web-based activity, and apps.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google also puts forward a Dashboard tool that allows users to have an overview of the use they make of the services offered by Google such as Gmail or Youtube.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, Google reminds that when a user clicks Create Account without having disabled custom ad settings, an account creation confirmation pop-up appears to remind that the account is set to include customisation features.&nbsp;The company indicates that the user journey is thus configured to slow down the progression of users who would not have spontaneously made the choice of more privacy-friendly settings.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL takes note of the progress made in recent years by the company in its policy of informing users, in the sense of greater transparency and greater control over their data expected by them.&nbsp;For the reasons that follow, however, it considers that the requirements of the GDPR, the implementation of which must be assessed in the light of the concrete scope of the processing of personal data in question, are not respected.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Firstly, the CNIL recalls that pursuant to the provisions of Art 12 of the Regulation, information must be provided in an <strong>easily accessible way</strong>.&nbsp;This accessibility requirement is informed by the <strong>transparency guidelines</strong>, in which the EDPS considered that a key aspect of the transparency principle highlighted in these provisions is that the data subject should be able to advance what the scope and consequences of the processing encompass so as not to be caught off guard at a later stage as to how its personal data were used.&nbsp;[...] In particular, with regard to complex, technical or non-planned data processing,&nbsp;G29\'s position is that [...] controllers should <strong>separately and clearly define the main consequences of treatment</strong>: in other words, what will actually be the effect of the specific treatment described in a statement or opinion on the protection of the privacy for the data subject.&nbsp;The CNIL also recalls that the <strong>accessibility requirement </strong>of Article 12 is based in part on the ergonomic choices made by the controller.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In this case, the CNIL found that the general architecture of the information chosen by the Corporation does not meet the requirements of the Regulations.&nbsp;The information that must be disclosed to individuals pursuant to section 13 is <strong>excessively scattered in several documents</strong>: Privacy Policy and Terms of Use, displayed during the creation of the account, then Terms of Use and Rules of confidentiality which are accessible in a second time by means of clickable links appearing on the first document.&nbsp;These different documents include buttons and links that must be activated to learn additional information.&nbsp;Such an ergonomic choice leads to a fragmentation of information thus forcing the user to multiply the clicks necessary to access the different documents.&nbsp;The user must then carefully consult a large amount of information before he or she can identify the relevant paragraph (s).&nbsp;However, the work provided by the user does not stop there since it will still have to cross-check and compare the collected information in order to understand which data are collected according to the various settings that he may have chosen.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL noted that, given this architecture, some information is difficult to find. For example, with regard to targeted advertising, to know the information that is collected, a user must perform many actions and combine several documentary resources.&nbsp;As a first step, you should read the General Privacy Policy and Terms of Service, then click the More Options button and then the Read more link to display the Customise Ads page.&nbsp;He will thus have access to a first description of the treatment relating to the personalisation of the advertisement which proves to be incomplete.&nbsp;To complete the information relating to the data processed for this purpose,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Similarly, in terms of <strong>geolocation data processing</strong>, the CNIL noted that the same course devoid of any intuitive character is required from the user with regard to information relating to geolocation data.&nbsp;The user will have to complete the following steps: Review the Privacy Policy and Terms of Service, click More Options, and then click the Learn more link to view the Location History page and view the displayed text. However, as this text is only a short description of the processing, the user will need to go to the Privacy Policy document and access the Information about your location to access the rest of the information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the two cases described, <strong>five actions are necessary for the user to access the information</strong> relating to the targeted advertisements and s<strong>ix for the geolocation</strong>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL stated that if the user wished to have <strong>information on the retention periods</strong> of his personal data, he must first consult the Privacy Policy found in the main document and then go to the section titled Export and delete the information and finally click on the hyperlink click here contained in a general paragraph on storage times.&nbsp;It is therefore only after four clicks that the user accesses this information.&nbsp;The Restricted Training further notes that the title chosen by the company for Exporting and Deleting Your Information does not easily allow the user to understand that this is a topic to access information about retention periods .&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As a result of all these factors, there is an <strong>overall lack of accessibility</strong> of the information provided by the company in the context of the processing in question.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Secondly, the CNIL considered that the<strong> clear and comprehensible nature of the information provided</strong>, as required by Article 12 of the GDPR, <strong>must be assessed taking into account the nature of each treatment</strong> in question and its <strong>concrete impact on the persons concerned</strong>. concerned.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Beforehand, the CNIL considered it was essential to emphasise that the <strong>data processing</strong> implemented by the controller was <strong>particularly massive and intrusive</strong>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data Google collects <strong>comes from a wide variety of sources</strong>.&nbsp;This data is collected both from the use of the phone, the use of the company services, such as the Gmail email service or the Youtube video platform, but also from the data generated by the user activity when they visit third-party sites that use <strong>Google services, including Google Analytics cookies placed on these sites.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As such, the Privacy Policy reveals that <strong>at least twenty services</strong> offered by the company are likely to be involved in the processing, which may concern data such as web browsing history, history from applications, data stored locally on the equipment (such as address books), geolocation of equipment, etc.&nbsp;Therefore, <strong>a lot of data is processed as part of these services via or in connection with the Android operating system</strong>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The record shows that, in addition to data from external sources, the company treats <strong>at least three categories of data</strong>: </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>data produced by the user</strong> (for example, their name, password, phone number, email address, payment method, content created, imported or received, such as writings, photos or videos );  </li><li><strong>data generated by its activities</strong> (for example, IP address, unique user credentials, mobile network data, data related to wireless networks and Bluetooth devices, timestamp of actions performed, data geolocation, the technical data of the devices used including data relating to the sensors (accelerometer, etc.), the videos viewed, the searches made, the browsing history, the purchases, the applications used, etc .;</li><li><strong>Derived or inferred data from data provided by the user or his activities</strong>.&nbsp;In this category, the Privacy Policy lists a number of purposes that can only be accomplished by generating data from the other two categories of data.&nbsp;Thus, the customisation of the ads that the company realises requires to infer the interests of users from their activity in order to offer them to advertisers.&nbsp;In the same way, the purposes of providing content, research and personalised recommendations require inferring new information from those declared, produced or generated by the activity of the user.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Moreover, if the very large number of processed data can characterise alone the massive and intrusive nature of the treatments performed, the very nature of some of the data described, such as geolocation data or content consulted, reinforces this finding.&nbsp;Considered in isolation, the <strong>collection of each of these data is likely to reveal with a high degree of precision many of the most intimate aspects of people\'s lives, including their lifestyle, their tastes, their contacts, their opinions or their trips</strong>.&nbsp;The result of the combination of these data greatly reinforces the <strong>massive and intrusive nature of the processing</strong>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Consequently, it is in the light of the particular characteristics of these processing of personal data which have just been recalled that the characters are clear and understandable, within the meaning of Art 12 of the GDPR, of the information provided for in Art 13 of the Regulations, must be appreciated.&nbsp;The CNIL considered that these requirements were not respected in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Specifically, the CNIL noted that the information provided by Google did not allow the users to understand sufficiently the particular consequences of the processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the purposes announced in the various documents are described as follows: offer personalised services in terms of content and advertisements, ensure the safety of products and services, provide and develop services, etc.&nbsp;.&nbsp;They are too generic in terms of the scope of the treatments implemented and their consequences.&nbsp;This is also the case when users are told too loosely: <em>The information we collect is used to improve the services offered to all our users.&nbsp;[...] The information we collect and how we use it depends on how you use our services and how you manage your privacy settings.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Therefore, the CNIL noted that the description of the aims pursued did not allow users to measure the extent of the treatments and the degree of intrusion into their private lives that they are likely to take away.&nbsp;It considered, in particular, that such information is not provided in a clear manner, nor at the first level of information provided to users through, in this case, the document entitled Confidentiality rules and conditions of use nor in the other levels of information proposed by the company.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL further noted that the description of the data collected, which could be of such a nature as to clarify the scope of these purposes and to prevent the user from being subsequently caught off guard as to the way in which his data were used and combined, is particularly imprecise and incomplete, both in the analysis of the first level of information and that of the other documents provided.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For example, the Privacy Policy and Terms of Use document and the Privacy Policy document specify: <em>This may be more complex (...) information, such as the ads you find most useful, the people you care about. interest most on the web or YouTube videos that are likely to interest you.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In view of the foregoing, the CNIL believed that the user is not able, especially by being aware of the first level of information presented to him in the Privacy Policy and Terms of Use, to measure the scope of the main treatments on his private life.&nbsp;While it noted that exhaustive information, from the first level, would be counterproductive and does not respect the requirement of transparency, it considers that it should contain terms that would objectify the number and scope of implemented.&nbsp;It further considered that it would be possible, by other types of presentation methods adapted to data combining services,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The finding of lack of clarity and comprehensibility must also be made with regard to the mention of the legal basis of targeted advertising .&nbsp;In fact, the company first states in the Privacy Policy: <em>We ask you for permission to process your information for specific purposes, and you are free to revoke your consent at any time.&nbsp;For example, we ask you for permission to provide personalised services, such as ads.&nbsp;The legal basis chosen here therefore appears to be consent.&nbsp;</em>However, the company further adds it relies on the legitimate interest,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL stressed that if Google had indicated before that the only legal basis for the processing of the targeted advertisement was consent, the investigation shows that this clarification is not brought to the attention of the users.&nbsp;The formulations recalled above did not allow the latter to clearly measure the distinction between properly targeted advertising, based on the combination of multiple user data, which is based on the company\'s consent statement , other forms of targeting using for example the context of navigation, based on the legitimate interest.&nbsp;The CNIL stressed the particular importance of the need for clarity in these processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>With respect to information on the retention period, the CNIL noted that the How are Google\'s collected information page is maintained has four categories: </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>Information retained until the user deleted it;</li><li>Information with a timeout;</li><li>Information retained until user\'s Google Account is deleted;</li><li>Information kept for long periods of time for specific reasons.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It noted, however, that as regards to the latter category, only very general explanations of the purpose of this retention are provided and no precise duration or the criteria used to determine that duration are indicated.&nbsp;This information is among those that must be issued to users pursuant to Article 13 (2) (a) of the Regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, if the company claims that multiple information tools are made available to users concomitantly and after the creation of their account, the restricted training notes that these methods do not make it possible to reach the requirements of transparency and transparency. information from articles 12 and 13 of the GDPR.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>First, the CNIL noted that the tools to which the company refers do contribute, to a certain extent, to the goal of transparency throughout the life of the account and the use of Google\'s services.&nbsp;However, it considered that they do not participate sufficiently in the information provided for in Article 13, which must be provided at the time data are obtained.&nbsp;As mentioned in the EDPS Transparency Guidelines, Article 13 specifies the information to be provided to data subjects from the start of the processing cycle.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>If any data other than those strictly necessary to create the account, are collected throughout the life of the account, such as browsing history or purchases, the time of its creation marks the entry of the user in the ecosystem of Google services, whose particularly massive and intrusive nature of processing has been recalled previously.&nbsp;This step marks the beginning of a multitude of treatment operations: collection, combination, analysis, etc.&nbsp;Therefore, since the process of creating the account is essential in the understanding of treatments and their impact and where the proposed user journey itself invites the person concerned to focus his attention at this stage, the information provided for in Rule 13 of the Rules of Procedure at that time must.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Moreover, both the pop-up window appearing at the time of the creation of the account and the electronic message sent as soon as the account is created contain only a summary or very specific information on the processing implemented and can not allow to consier the prior information as sufficient.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the text of the pop-up window indicates <em>This Google Account is configured to include customisation features (such as recommendations and custom ads) that are based on the information stored in your account.&nbsp;The e-mail indicates the main features of the Google Account and the existence of control tools.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>With regard to the confidentiality check-up tool, this essentially allows the user to set up the collected information such as browsing history or visited places.&nbsp;Finally, the Dashboard consists of an information panel for each Google service overview of the use of the account holder.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Nevertheless, these confidentiality check-up and Dashboard tools can only be used, just like the e-mail mentioned above, after the account creation step, which is nevertheless essential for informing users as well as it has been said.&nbsp;In addition, although their existence and interest are brought to the attention of users, they imply an active and initiative of these.&nbsp;For these reasons, these tools do not allow to consider that sufficient information is provided for the application of Article 13 of the Regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the light of all these elements, the CNIL committee considers that a breach of the transparency and information obligations as provided for in Articles 12 and 13 of the Regulation is characterised.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>5. Failure to provide a legal basis for the processing implemented</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 6 of the RGPD states that: 1.&nbsp;&nbsp;&nbsp;Processing&nbsp;shall be lawful only if and to the extent that at least one of the following applies:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a)&nbsp;&nbsp;&nbsp; the data subject has given consent to the&nbsp;processing&nbsp;of his or her personal data for one or more specific purposes;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(b)&nbsp;&nbsp;&nbsp;&nbsp;processing&nbsp;is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(c)&nbsp;&nbsp;&nbsp;&nbsp;processing&nbsp;is necessary for compliance with a legal obligation to which the&nbsp;controller&nbsp;is subject;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(d)&nbsp;&nbsp;&nbsp;&nbsp;processing&nbsp;is necessary in order to protect the vital interests of the data subject or of another natural person;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(e)&nbsp;&nbsp;&nbsp;&nbsp;processing&nbsp;is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the&nbsp;controller;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(f)&nbsp;&nbsp;&nbsp;&nbsp;processing&nbsp;is necessary for the purposes of the legitimate interests pursued by the&nbsp;controller&nbsp;or by a&nbsp;third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>the processing is necessary to safeguard the vital interests of the data subject or of another natural person;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google was criticised for failing to validly collect the consent of individuals for targeted advertising.&nbsp;It was also considered that the company could not claim a legitimate interest for these processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In defence, Google specified that it relied solely on the consent for the targeted advertising.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 4 (11) of the above-mentioned Regulations specifies what consent means: <em>any freely given, specific, informed and unambiguous indication of the data subject\'s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 7 of the same Regulation provides the conditions that apply to it:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>1.&nbsp;&nbsp;&nbsp;Where&nbsp;processing&nbsp;is based on consent, the&nbsp;controller&nbsp;shall be able to demonstrate that the data subject has consented to&nbsp;processing&nbsp;of his or her personal data.</em></li><li><em>2.&nbsp;&nbsp;&nbsp;If the data subject\'s consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in a manner which is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language. Any part of such a declaration which constitutes an infringement of this Regulation shall not be binding.</em></li><li><em>3.&nbsp;&nbsp;&nbsp;The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of&nbsp;processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent.</em></li><li><em>4.&nbsp;&nbsp;&nbsp;When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia , the performance of a contract, including the provision of a service, is conditional on consent to the&nbsp;processing&nbsp;of personal data that is not necessary for the performance of that contract.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Firstly, Google said that the users\' consent is informed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It believes that simple and clear information is presented to the user when creating an account and allow him to know how the company uses the data for customisation purposes.&nbsp;In particular, the Company refers to the summary entitled Privacy Policy and Terms of Use, the sections dedicated to the targeted advertisements contained in the Privacy Policy and the additional information message entitled Targeted Advertising in the Menu Options account creation setting.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Secondly, Google claimed that the user\'s consent is specific and unambiguous.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, it stated that when setting up the account, the user has the option of making a choice regarding the display of targeted advertising .&nbsp;It considers that this possibility enables to express its consent to the use of its data independently of the other choices it may express with regard to the other purposes relating to the processing associated with the Google Account (eg YouTube search history).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It also considered that the procedures for obtaining consent for the purposes of targeted advertisements it sets up are in line with the recommendations of the CNIL of December 5, 2013 regarding cookies.&nbsp;In particular, it specifies that short information is available on the targeted ads followed by an \"I accept\" button (the Privacy Policy and the Terms of Use), preceded by a \"more options\" button that gives users the ability to disable multiple processing operations, including for targeted ad purposes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It also argued that the solution presented in the public notice of the president of the CNIL No. MED-2018-023 of November 29, 2018 allows the user to consent to all ends via a button accept all.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Lastly, it considered that explicit consent for the processing of data for the purposes of targeted advertising, within the meaning of Art 9 (2) (a) of the GDPR, could not be required in the absence of sensitive data.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Regarding the informed consent&nbsp;and&nbsp;the&nbsp;spread&nbsp;of&nbsp;information</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the first place, the CNIL specified that this informed character must be examined in the light of the preceding developments concerning the lack of transparency and information of the users during the setting up of their account.&nbsp;It considered that the deficiencies previously identified necessarily have an impact on the information delivered to the users to ensure the informed nature of the consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL indicated that the EDPS Guideline of 10 April 2018 on Consent within the meaning of Regulation 2016/679 (WP250) states that the controller must ensure that consent is provided on the basis of information that enables the people concerned to easily identify who is responsible for the data and to understand what they are agreeing to.&nbsp;[It] must clearly describe the purpose of the data processing for which consent is sought.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These guidelines also state that: In order for consent to be informed, it is necessary to inform the person concerned of certain crucial elements in making a choice.&nbsp;[..] At least the following information is required in order to obtain valid consent: </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the identity of the controller,</em></li><li><em>the purpose of each processing operation for which consent is sought,</em></li><li><em>the (types of) data collected and used,</em></li><li><em>the existence of the right to withdraw consent,</em></li><li><em>information on the use of data for automated decision-making [..] and</em></li><li><em>information on the possible risks associated with the transmission of data due to the lack of a decision on adequacy and appropriate safeguards [...].</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>As it was able to identify under the breach of the transparency and information requirements, the CNIL considered that the information on targeted advertising is excessively disseminated in separate documents and is not, as such, easily accessible.&nbsp;In this respect, the CNIL refered to the preceding developments on the multiple actions that must be performed by a user who wishes to be made aware of available on the processing related to the targeted advertisement.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In addition, the CNIL also noted under the breach of transparency obligations, the information provided was not sufficiently clear and understandable in that it was difficult for a user to have a global understanding of the can do the object and their scope.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As an illustration, the information in the targeted Ad section, accessible from the Privacy Policy and Terms and Conditions document through the More Options button, contains the following: Google can show you ads based on your activity in Google services (for example, in the search or on YouTube, as well as on Google\'s websites and partner applications).&nbsp;The CNIL noted that it is not possible to read, for example through clickable links, the services, sites and Google application to which the company refers.&nbsp;Therefore, the user was not able to understand the targeted advertising they are subject to, as well as their scope,&nbsp;even though these treatments nevertheless imply a plurality of services (for example: Google search, YouTube, Google home, Google maps, Playstore, Google photo, Google play, Google analytics, Google translation, Play books) and the processing of a large amount of data personal character.&nbsp;Users are not able to have a proper perception of the nature and volume of data that is collected.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In view of these elements, the CNIL committee considered that the users\' consent for targeted advertising was not sufficiently informed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>With regard to the specific and unequivocal nature of the consent</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 of the Regulation provides that: <em>Consent must be given by a clear positive act by which the data subject expresses in a free, specific, informed and unambiguous manner his agreement to the processing of his personal data [...].&nbsp;There can therefore be no consent in the event of silence, boxes checked by default or inactivity.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 43 of the GDPR states that: <em>Consent is presumed not to have been freely given if separate consent can not be given to different personal data processing operations, although this is appropriate in the present case.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The above EDPS guidance on consent states that: <em>In order to comply with the specific nature of consent, the controller must ensure: [...] (ii) the detailed nature of consent requests [...] This means that data controller who seeks consent for various specific purposes should provide separate consent for each purpose so that users can give specific consent for specific purposes.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In this case, the CNIL noted that when the user creates an account, he has the possibility to modify some of the parameters associated with the account.&nbsp;To access these settings, the user must click the more options button, present before the Create Account button.&nbsp;the CNIL also noted that the personalisation settings of the account, which contain the choice for the display of personalised ads, are pre-checked by default, which means, unless otherwise indicated, the agreement of the user to processing of its data for the purposes mentioned (eg YouTube search history, display of personalised ads etc.).&nbsp;The user has the option to uncheck these parameters if he does not want these treatments to be implemented.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL observed that, at the time of the creation of the account, if the user does not click on the button more options to set his account, he must check the boxes <em>I accept the terms of use of Google and I agree that my information will be used as described above and detailed in the Privacy Policy</em>.&nbsp;Subsequently, he must press the <em>Create Account</em> button.&nbsp;A pop-up window appears, titled Simple confirmation that contains the following text This Google Account is set up to include customisation features (such as recommendations and custom ads), which are based on information stored in your account.&nbsp;To change your personalisation settings and the information stored in your account,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>If it does not click <em>More Options</em>, the user must select the <em>Confirm</em> button to complete the account creation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In view of the foregoing, the CNIL noted that if the user has the possibility to modify the configuration of the parameters of his account prior to its creation, a positive action on his part is necessary to access the possibilities of setting up the account.&nbsp;Thus, the user can completely create his account, and accept the related processing, including targeted advertising, without clicking <em>More options</em>.&nbsp;Therefore, the user\'s consent is not, in this case, validly collected to the extent that it is not given through a positive act by which the person consents specifically and distinctly to the processing of its data for purposes of targeted advertising compared to other purposes of treatment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL also considered that the actions by which the user proceeds to the creation of his account - by ticking the boxes I accept the conditions of use of Google and I accept that my information is used as described below above and detailed in the privacy rules, and then selecting Create Account - can not be considered as the expression of a valid consent.&nbsp;The specific nature of the consent is not respected because the user, by these actions, accepts all the processing of personal data implemented by the company, including those of targeted advertising.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In addition, the CNIL noted that multiple technology processes are used by the company to combine and analyse data from different external services, applications or sources.&nbsp;They undeniably have a multiplying effect on the precise knowledge society has of its users.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As a result, the restricted formation believes that the company has operations of combinations with almost unlimited potential allowing a massive and intrusive treatment of the data of the users.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Given the scope of the data processing - in particular that of targeted advertising - and the number of people concerned, the CNIL underlined that the deficiencies previously retained are of a particular gravity.&nbsp;A lack of transparency regarding these wide-scope processing, as well as a lack of valid user consent to targeted advertising, constitute substantial infringements of the protection of their privacy and are contrary to legitimate aspirations of people who want to keep control of their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In this respect, strengthening the rights of individuals is one of the main thrusts of the Regulation.&nbsp;The European legislator recalls that The rapid evolution of technologies and globalization have created new challenges for the protection of personal data.&nbsp;The extent of collection and sharing of personal data has increased significantly.&nbsp;Technologies allow both private and public authorities to use personal data as never before in their business (...) Technologies have transformed both the economy and social relations (recital 6) .&nbsp;It stresses that these developments require a strong data protection framework (...) with rigorous enforcement of the rules, it is important to create the confidence that will enable the digital economy to develop in the internal market as a whole.&nbsp;Individuals should have control over their personal data.&nbsp;(recital 7).&nbsp;The European legislator regrets, finally, that Directive 95/46 / EC has not made it possible to avoid the widespread public perception that significant risks to the protection of individuals still exist, in particular as regards the online environment.&nbsp;(recital 9).&nbsp;whereas Directive 95/46 / EC has not prevented the widespread public perception that significant risks to the protection of individuals still exist, in particular with regard to the online environment.&nbsp;(recital 9).&nbsp;whereas Directive 95/46 / EC has not prevented the widespread public perception that significant risks to the protection of individuals still exist, in particular with regard to the online environment.&nbsp;(recital 9).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL thus considered, in view of the scale of the processing carried out and the compelling need for the users to keep control of their data, that they must be put in a position to be sufficiently informed of the scope of the data implemented and to validly consent to it, unless to deprive of basic confidence in the digital ecosystem.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the CNIL emphasised that shortcomings need to be put into perspective with regard to the company\'s business model, in particular the place of the users\' data processing for advertising purposes via the Android operating system.&nbsp;In view of the benefits it takes from these processing, Google must pay particular attention to its responsibility under the GDPR in their implementation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It follows from all the foregoing and the criteria which have been duly taken into account by the Committee, in view of the maximum amount incurred on the basis of 4% of the turnover indicated in point 2 of this Decision, that a financial penalty is justified up to 50 million euros, as well as a supplementary publicising sanction for the same reasons.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Account is also taken of the company\'s prominent place in the market for operating systems, the seriousness of the deficiencies and the interest this decision represents in informing the public in determining the duration of its publication.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>FOR THESE REASONS</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The restricted formation of the CNIL, after having deliberated, decides:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>to award Google LLC a monetary penalty in the amount of 50 (fifty) million euros;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>to send this decision to Google France Sarl for the execution of this decision;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google has already publicly announced it has appealed the case. It\'s of course important as this decision creates a precedent and establish the rules.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is only  start.<a href=\"https://www.laquadrature.net/en/2019/01/21/first-sanction-against-google-following-our-collective-complaints/\"> La Quadrature du Net publishe</a>d : \"<em>Today, the CNIL&nbsp;</em><a href=\"https://www.cnil.fr/en/cnils-restricted-committee-imposes-financial-penalty-50-million-euros-against-google-llc\"><em>sanctioned</em></a><em>&nbsp;</em><strong><em>Google to a 50 million Euros fine</em></strong><em>, stating that the targeted advertising it engages in with its operating system Android is in breach of the GDPR, the new European regulation that came into effect on May 25. However, this sanction is really only the beginning of an answer to our complaint against Google, which denounced especially the targeted advertising imposed on Youtube, Gmail and Google Search in violation of our consent.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>In this respect, the CNIL explains the low amount of its sanction, considering Google’s nearly </em><a href=\"https://www.statista.com/statistics/266206/googles-annual-global-revenue/\"><em>110 billion US dollars</em></a><em> revenue, by the fact it limited the scope of its examination to “the data processing covered by the privacy policy presented to a user when creating their account on their Android mobile phone” (our translation). </em><sup><em>1</em></sup><em> We therefore expect the CNIL to quickly answer the rest of our complaint, which concerns Youtube, Gmail and Google Search, by issuing a fine commensurate with this company and the extent and the duration of the violation of ours rights (the maximum amount possible is 4 billion euros – 4% of global revenue –, which we hope for).</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This publication is licensed under a Creative Commons Attribution 4.0 International<br>More information on the licence can be found <a href=\"http://creativecommons.org/licenses/by/4.0/\">here</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br></p>\n<!-- /wp:paragraph -->','Google Subject to the Biggest Fine Under GDPR','In what is today the biggest fine under the GDPR, the French Data Protection Authority CNIL investigated Google Android transparency in Data procession. The investigation was consecutive to two class actions filed on the 25th of May 2018. One by the Austrian NGO Non Of Your Business (NOYB), another by the French La Quadrature du Net (LQDN). This decision worth a close look.','inherit','closed','closed','','204-revision-v1','','','2019-03-08 21:20:24','2019-03-08 21:20:24','',204,'https://datarainbow.eu/2019/03/08/204-revision-v1/',0,'revision','',0),(329,5,'2019-03-08 21:22:33','2019-03-08 21:22:33','<!-- wp:paragraph -->\n<p><a href=\"https://www.handelsblatt.com/politik/deutschland/datenschutzgrundverordnung-behoerden-verhaengen-erste-bussgelder-wegen-verstoessen-gegen-dsgvo/23872806.html?utm_term=Autofeed&amp;social=tw-hb_hk-li-ne-or-&amp;utm_medium=Social&amp;utm_content=hb_hk&amp;utm_source=Twitter&amp;ticket=ST-3132650-6BS3JkvjeZRSOdTaQcJa-ap4#Echobox=1547811383\">The Handlsblatt</a> report the authorities first fines for violations of GDPR (DSGVO)  by the various DPAs in the German Federal States. :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Nationwide, fines have been issued in 41 cases because of DSGVO violations. Especially small companies are apparently unprepared for the new rules. \"<em>Most fines were imposed by North Rhine-Westphalia (33), followed by Hamburg (3) and Baden-Württemberg and Berlin (2 each) and Saarland (1). Alone at the Bavarian State Office for Data Protection Supervision (BayLDA), which monitors the observance of data protection law in private business enterprises, in freelancers, in associations and associations as well as on the internet, currently 85 fine proceedings are under the GDPR.</em>\" </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>The large number of consultation requests and the explicit complaints indicate that there has been an increased awareness.</em>\" In this respect one could say: \"<em>The DSGVO has been effective with regard to those affected.</em>\" There are serious deficiencies in the data processing information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>According to the Hamburg data protection Authority, Johannes Caspar, \"<em>a lot has changed for the better in companies as well</em>\".&nbsp;Awareness of data protection and understanding of one\'s own responsibility for the processing of data has increased significantly.&nbsp;For example regarding the appointment of data protection officers or the creation of processing directories and data protection statements.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>In this respect, this improved awareness is certainly one of the most important changes by the GDPR</em>,\" according to Johannes Caspar.&nbsp;\"<em>The huge increase in consultancy shows the great need of companies to behave in compliance with data protection</em>,\" said BayLDA President Thomas Kranig .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>With regard to global Internet companies, supervisors must be able to enforce data protection in accordance with the GDPR and, where necessary, initiate and implement fast and effective procedures,</em>\" Johannes Caspar said.&nbsp;It will show whether the European Data Protection Board and the national authorities represented therein are able to ensure the uniform and effective protection of the rights and freedoms of stakeholders in this field.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For the Bavarian State Commissioner for&nbsp;<a href=\"https://www.handelsblatt.com/themen/datenschutz\">Data Protection</a>,&nbsp;Thomas Petri, it was important that companies such as clinics or transport companies,&nbsp;<a href=\"https://www.handelsblatt.com/unternehmen/it-medien/studie-zur-it-sicherheit-viele-firmen-sind-bei-cyberangriffen-konzeptlos/23178588.html\">adapted as soon as possible their privacy management.</a> He considers \"<em>Sometimes fines can inhibit rather than promote fines,</em>\" while at the same time he warned: \"<em>I should not rely unconditionally on my restraint.</em>\" He had already warned a number of clinics for significant violations that they would result in fines.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It was about&nbsp;<a href=\"https://www.handelsblatt.com/unternehmen/it-medien/emotet-angriffe-cybersicherheit-ist-noch-immer-selten-chefsache-das-kann-sich-raechen/23732342.html\">\"significant technical and organizational deficiencies.\"</a>&nbsp;In Brandenburg, it was said in the \"conversion phase\" consultations would be more effective than the \"immediate application of the tightened fine rules\".&nbsp;However, fines would \"make use of them in the future,\" emphasized data protection officer Dagmar Hartge.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Data Protection Authority of Lower Saxony is currently conducting a \"cross-sectional inspection\" of 50 companies in Lower Saxony for the GDPR implementation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We can only agree with the Berlin data protection officer Maja Smoltczyk, \"<em>The General Data Protection Regulation represents a first important step in helping to safeguard our freedoms</em>\" .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This publication is licensed under a Creative Commons Attribution 4.0 International<br>More information on the licence can be found <a href=\"http://creativecommons.org/licenses/by/4.0/\">here</a>. </p>\n<!-- /wp:paragraph -->','Increasing Fines Expected from German DPAs','In Germany, nationwide, fines have been issued in 41 cases because of GDPR violations. Especially small companies are apparently unprepared for the new rules.','inherit','closed','closed','','307-revision-v1','','','2019-03-08 21:22:33','2019-03-08 21:22:33','',307,'https://datarainbow.eu/2019/03/08/307-revision-v1/',0,'revision','',0),(330,5,'2019-03-13 12:25:19','0000-00-00 00:00:00','<!-- wp:paragraph -->\n<p>What is the legitimacy of harvesting social media to feed the facial recognition algorithm?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What is the lawful basis of processing personal data very possibility sensitive data as our recognisable pictures?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 51: “Those personal data should include personal data revealing racial or ethnic origin, whereby the use of the term ‘racial origin’”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>photographs should not systematically be considered to be processing of SC of PD as they are covered by the definition of biometric data only when processed through a specific technical means allowing the unique identification or authentication of a natural person.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Non Facebook users have no expectation that their pictures will be used by FB . LI might not stand</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Liliane :&nbsp;That shld be illegal imho tho legit interests vaguely poss ( but not if it is biometric). ( do non Fb users get tagged? Never happens on photos on my Fb)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>EERke the person in the picture might not even be a FB user. The facial recognition algorithm may fail to recognise them, or recognise them as an earlier hit from same person, (and not generate a tagging suggestion,) but no explicit consent in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Liliane I\'d argue by analogy w recital 51 that a pic only \"reveals\" racial data ( say) where it is being specifically processed to identify a person acc to that variable, otherwise again reduction ad absurdio But see Obiter in Uk Murray v Big Picture para 80 ( handily looking up own bk.</p>\n<!-- /wp:paragraph -->','','','draft','open','open','','','','','2019-03-13 12:25:19','2019-03-13 12:25:19','',0,'http://datarainbow.eu/?p=330',0,'post','',0),(332,5,'2019-03-14 13:54:09','2019-03-14 13:54:09','<!-- wp:paragraph -->\n<p>We are working on building a privacy compliant website. This site does not use any analytics.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":116,\"align\":\"left\",\"width\":360,\"height\":230} -->\n<div class=\"wp-block-image\"><figure class=\"alignleft is-resized\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-21-at-14.52.01-2.png\" alt=\"\" class=\"wp-image-116\" width=\"360\" height=\"230\" /></figure></div>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>We do not use cookies unless strictly functional. We are trying our best to not allow third parties to track our visitors by cookies or by Java Script embeded code. It\'s hard job. We might lose traffic and SEO. We have used a Word Press template.  WP templates are mainly server side PHP scripts full of board cascading code built on code. We can\'t even see the actual code. When using the WP admin, the templates are loaded in the back. We wanted to let make you aware that this potential risk. Help us by spreading the word. If you see anything suspicious, lets us know.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We believe our visitors deserve protection and privacy. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We want your trust. In particular, we do not use Google analytics, avoiding to share data with external third parties.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":78} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-22-at-11.16.16-1024x415.png\" alt=\"\" class=\"wp-image-78\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>When links are posted, beware that they will take you to an external website that is hosted by a third-party provider not necessarily in your regional jurisdiction or that of DataRainbow. The company may collect, store and use information independent of DataRainbow including but not limited to IP address, browser details etc. DataRainbow has no control over the collection or use of this information. For more information on the linked sites Privacy Policy and the Lawful basis for this data collection, read their privacy notice/policy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This website has been built with the support and help of <a href=\"https://baycloud.com/\">BayCloud.&nbsp;</a> They exceptionally provided the WordPress template and the hosting.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We are very grateful for their hosting of this website and assistance. Here is what you can find on BayCloud website :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Back in May 2011 Baycloud Systems introduced the original tool for helping websites comply with Do-Not-Track and the Data Protection and ePrivacy Directives, backed by a cost-effective and exhaustive website auditing service.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Fast track to 2017 and we are now the leading provider to multi-national companies of multi-language and multi-compliance systems, capable of actively managing the users\'s terminal storage in a secure way, not only to protect website visitors’ personal data but also clearly giving them control over its collection and use.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>The Baycloud Consent Platform manages the consent request process, presenting information on usage commitments and user benefits in any language, with a per-site customised user experience and ensuring their choice is continuously available. We ensure that tracking and storage consent policies are properly adhered to, with users\' consent capable of being revoked at any time and automatically after a configurable \"sunset\" period.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Baycloud was the first universal ePrivacy consent platform, and has, since 2011, focused on real user choice, actively managing first-party cookies and tracking third-parties. This means our technology has been honed and further developed through continuous use on thousands of major brand websites over many years, giving us an unquestioned lead in this space.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>We believe that publishers and brands that respect and offer a straightforward choice to their customers will earn their trust and loyalty.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":75} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-22-at-11.14.49-1024x429.png\" alt=\"\" class=\"wp-image-75\" /></figure>\n<!-- /wp:image -->','Privacy Notice','','inherit','closed','closed','','33-revision-v1','','','2019-03-14 13:54:09','2019-03-14 13:54:09','',33,'https://datarainbow.eu/2019/03/14/33-revision-v1/',0,'revision','',0),(336,5,'2019-04-04 14:39:33','2019-04-04 13:39:33','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><strong>UPDATE :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook headlines in the news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Via <a href=\"https://www.linkedin.com/in/mario-guglielmetti-31a57242/\">Mario Guglielmetti </a>: \'<em>the Parliament(s) of 9 countries of the world, calling Mr Zuckerberg to testify on electoral manipulation by his company once more. Canadian Parliament asks for a subpoena. In case Facebook\'s CEO is on Canadian territory, he\'ll be brought to the hearing by force.</em>\'  <a href=\"https://www.cbc.ca/news/politics/facebook-zuckerberg-cambridge-analytica-1.5127007\">Ethics committee votes to subpoena Facebook\'s Mark Zuckerberg to testify</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Bloomberg report : <a href=\"https://news.bloomberglaw.com/securities-law/facebooks-zuckerberg-sued-over-scandals-alleged-insider-trades\">Zuckerberg Sued Over Privacy Scandals, Alleged Insider Trades (1)&nbsp;\"</a><em>Mark Zuckerberg and&nbsp;Facebook Inc.‘s other top executives have been hit with a lawsuit accusing them of insider trading and blaming them for the privacy scandals that have rocked the social media giant and its stock value since 2016.</em>  <em>The shareholder complaint was filed May 1 in Delaware Chancery Court against Zuckerberg, Sheryl Sandberg, Peter Thiel, and three other Facebook board members. It comes about a week after the company announced it expected to pay a fine of up to $5 billion for violating a Federal Trade Commission consent decree requiring better privacy safeguards</em>.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.politico.com/story/2019/05/01/new-privacy-oversight-on-the-table-for-facebook-zuckerberg-1402278\">Nancy Scola wrote in Politico</a> : \'<em>Facebook and the Federal Trade Commission are negotiating a possible settlement that would require the company to place privacy-minded executives at the company\'s highest levels, a source close to the talks told POLITICO on Wednesday — in addition to paying the expected multibillion-dollar fine it disclosed last week.</em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"<em>Facebook should not get to decide what Canadian privacy law does or does not require.</em>” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ashkan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of <a href=\"https://abcnews.go.com/Technology/europes-privacy-watchdog-opens-11th-investigation-facebook/story?id=62626462\">“hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR</a> <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS&nbsp;</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan&nbsp;</a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : \'<em>Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations.</em> \'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\'</em> Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"align\":\"left\"} -->\n<p style=\"text-align:left\"><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;of&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announced :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook promise it changed its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A new notification tells users events their \'friends\' will attend. Not sure this is going to be much privacy friendly !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','publish','open','open','','facebook-saga','','','2020-01-18 14:07:21','2020-01-18 14:07:21','',0,'http://datarainbow.eu/?p=336',0,'post','',0),(337,5,'2019-04-04 13:33:21','2019-04-04 12:33:21','{{unknown}}','','','publish','closed','closed','','adbef2c90b5907e9f28bac6927659489','','','2019-04-04 13:33:21','2019-04-04 12:33:21','',0,'https://datarainbow.eu/2019/04/04/adbef2c90b5907e9f28bac6927659489/',0,'oembed_cache','',0),(338,5,'2019-04-04 13:35:26','2019-04-04 12:35:26','<!-- wp:paragraph -->\n<p>In the land of Facebook things are getting tough.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading {\"level\":1} -->\n<h1>Over 540 million Facebook records found on exposed AWS servers</h1>\n<!-- /wp:heading -->','Facebook Deluge','','inherit','closed','closed','','336-revision-v1','','','2019-04-04 13:35:26','2019-04-04 12:35:26','',336,'https://datarainbow.eu/2019/04/04/336-revision-v1/',0,'revision','',0),(339,5,'2019-04-04 14:20:41','2019-04-04 13:20:41','','Screenshot 2019-04-04 at 14.19.29','','inherit','open','closed','','screenshot-2019-04-04-at-14-19-29','','','2019-04-04 14:20:41','2019-04-04 13:20:41','',336,'/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png',0,'attachment','image/png',0),(340,5,'2019-04-04 14:39:33','2019-04-04 13:39:33','<!-- wp:paragraph -->\n<p>In the land of Facebook things are getting tough.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations. </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal, <a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports <em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in <a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a> was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation. </a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls for stronger regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by </strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power. </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers <a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has <a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a> highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance, <a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a> direct access to its users’ data. Those actions are <a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-04 14:39:33','2019-04-04 13:39:33','',336,'https://datarainbow.eu/2019/04/04/336-revision-v1/',0,'revision','',0),(342,5,'2019-04-04 15:08:43','2019-04-04 14:08:43','<!-- wp:paragraph -->\n<p>In the land of Facebook things are getting tough.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Johnny Ryan wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-04 15:08:43','2019-04-04 14:08:43','',336,'https://datarainbow.eu/2019/04/04/336-revision-v1/',0,'revision','',0),(345,5,'2019-04-04 15:53:22','2019-04-04 14:53:22','','IMG_1081','','inherit','open','closed','','img_1081','','','2019-04-04 15:53:22','2019-04-04 14:53:22','',336,'/wp-content/uploads/sites/3/2019/04/IMG_1081.jpg',0,'attachment','image/jpeg',0),(346,5,'2019-04-04 15:54:12','2019-04-04 14:54:12','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Johnny Ryan wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-04 15:54:12','2019-04-04 14:54:12','',336,'https://datarainbow.eu/2019/04/04/336-revision-v1/',0,'revision','',0),(348,5,'2019-04-04 16:16:39','2019-04-04 15:16:39','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Johnny Ryan wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee </a></em>in <a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-04 16:16:39','2019-04-04 15:16:39','',336,'https://datarainbow.eu/2019/04/04/336-revision-v1/',0,'revision','',0),(350,5,'2019-04-04 16:21:58','2019-04-04 15:21:58','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Johnny Ryan wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-04 16:21:58','2019-04-04 15:21:58','',336,'https://datarainbow.eu/2019/04/04/336-revision-v1/',0,'revision','',0),(352,5,'2019-04-05 14:02:53','2019-04-05 13:02:53','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr <a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-05 14:02:53','2019-04-05 13:02:53','',336,'https://datarainbow.eu/2019/04/05/336-revision-v1/',0,'revision','',0),(354,5,'2019-04-05 20:12:19','2019-04-05 19:12:19','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">. says CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-05 20:12:19','2019-04-05 19:12:19','',336,'https://datarainbow.eu/2019/04/05/336-revision-v1/',0,'revision','',0),(356,5,'2019-04-10 13:54:41','2019-04-10 12:54:41','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook changes its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-10 13:54:41','2019-04-10 12:54:41','',336,'https://datarainbow.eu/2019/04/10/336-revision-v1/',0,'revision','',0),(359,5,'2019-04-17 12:36:08','2019-04-17 11:36:08','<!-- wp:paragraph -->\n<p>We are working on building a privacy compliant website. This site does not use any analytics.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":116,\"align\":\"left\",\"width\":360,\"height\":230} -->\n<div class=\"wp-block-image\"><figure class=\"alignleft is-resized\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-21-at-14.52.01-2.png\" alt=\"\" class=\"wp-image-116\" width=\"360\" height=\"230\" /></figure></div>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>We do not use cookies unless strictly functional. We are trying our best to not allow third parties to track our visitors by cookies or by Java Script embeded code. It\'s hard job. We might lose traffic and SEO. We have used a Word Press template.  WP templates are mainly server side PHP scripts full of board cascading code built on code. We can\'t even see the actual code.&nbsp;When using the WP admin, the templates are loaded in the back. We wanted to let make you aware that this potential risk. Help us by spreading the word. If you see anything suspicious, lets us know.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We believe our visitors deserve protection and privacy. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We want your trust. In particular, we do not use Google analytics, avoiding to share data with external third parties.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":78} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-22-at-11.16.16-1024x415.png\" alt=\"\" class=\"wp-image-78\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>When links are posted, beware that they will take you to an external website that is hosted by a third-party provider not necessarily in your regional jurisdiction or that of DataRainbow. The company may collect, store and use information independent of DataRainbow including but not limited to IP address, browser details etc. DataRainbow has no control over the collection or use of this information. For more information on the linked sites Privacy Policy and the Lawful basis for this data collection, read their privacy notice/policy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Most other web sites don\'t actually comply with the laws relating to data protection and privacy and as such it is impossible for us to guarantee that the sites we link to will not misuse your data. We hope regulators will enforce the law against these organisations. As such please always be mindful of clicking on links to third party web sites - we would recommend that you have various tools and plugins installed on your web browser to protect you such as:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>AdBlock Plus</li><li>NoScript</li><li>Privacy Badger</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Make sure that third party cookies and pop-ups are disabled in your web browser settings. We will produce a video showing you how to do this in the near future.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This website has been built with the support and help of <a href=\"https://baycloud.com/\">BayCloud. </a> They exceptionally provided the WordPress template and the hosting.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We are very grateful for their hosting of this website and assistance. Here is what you can find on BayCloud website :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Back in May 2011 Baycloud Systems introduced the original tool for helping websites comply with Do-Not-Track and the Data Protection and ePrivacy Directives, backed by a cost-effective and exhaustive website auditing service.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Fast track to 2017 and we are now the leading provider to multi-national companies of multi-language and multi-compliance systems, capable of actively managing the users\'s terminal storage in a secure way, not only to protect website visitors’ personal data but also clearly giving them control over its collection and use.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>The Baycloud Consent Platform manages the consent request process, presenting information on usage commitments and user benefits in any language, with a per-site customised user experience and ensuring their choice is continuously available. We ensure that tracking and storage consent policies are properly adhered to, with users\' consent capable of being revoked at any time and automatically after a configurable \"sunset\" period.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Baycloud was the first universal ePrivacy consent platform, and has, since 2011, focused on real user choice, actively managing first-party cookies and tracking third-parties. This means our technology has been honed and further developed through continuous use on thousands of major brand websites over many years, giving us an unquestioned lead in this space.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>We believe that publishers and brands that respect and offer a straightforward choice to their customers will earn their trust and loyalty.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":75} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-22-at-11.14.49-1024x429.png\" alt=\"\" class=\"wp-image-75\" /></figure>\n<!-- /wp:image -->','Privacy Notice','','inherit','closed','closed','','33-revision-v1','','','2019-04-17 12:36:08','2019-04-17 11:36:08','',33,'https://datarainbow.eu/2019/04/17/33-revision-v1/',0,'revision','',0);
INSERT INTO `wp_3_posts` (`ID`, `post_author`, `post_date`, `post_date_gmt`, `post_content`, `post_title`, `post_excerpt`, `post_status`, `comment_status`, `ping_status`, `post_password`, `post_name`, `to_ping`, `pinged`, `post_modified`, `post_modified_gmt`, `post_content_filtered`, `post_parent`, `guid`, `menu_order`, `post_type`, `post_mime_type`, `comment_count`) VALUES (362,5,'2019-04-29 12:09:31','2019-04-29 11:09:31','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan﻿</a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\' Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’. </a>The head f the European Data Protection board, in charge of the Consistency Mechanism and harmonisation of regulations announces :  “<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook changes its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-29 12:09:31','2019-04-29 11:09:31','',336,'https://datarainbow.eu/2019/04/29/336-revision-v1/',0,'revision','',0),(364,5,'2019-04-29 17:16:33','2019-04-29 16:16:33','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"Facebook should not get to decide what Canadian privacy law does or does not require.” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Askan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of “hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK WILL FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan </a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\' Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;f&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announces :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook changes its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-29 17:16:33','2019-04-29 16:16:33','',336,'https://datarainbow.eu/2019/04/29/336-revision-v1/',0,'revision','',0),(366,5,'2019-04-29 17:19:59','2019-04-29 16:19:59','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"Facebook should not get to decide what Canadian privacy law does or does not require.” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Askan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of “hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS </a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan </a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\' Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;f&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announces :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook changes its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-29 17:19:59','2019-04-29 16:19:59','',336,'https://datarainbow.eu/2019/04/29/336-revision-v1/',0,'revision','',0),(368,5,'2019-04-29 17:25:55','2019-04-29 16:25:55','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"Facebook should not get to decide what Canadian privacy law does or does not require.” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ashkan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of <a href=\"https://abcnews.go.com/Technology/europes-privacy-watchdog-opens-11th-investigation-facebook/story?id=62626462\">“hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR</a> <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS&nbsp;</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan </a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\' Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;f&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announces :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook changes its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-04-29 17:25:55','2019-04-29 16:25:55','',336,'https://datarainbow.eu/2019/04/29/336-revision-v1/',0,'revision','',0),(370,5,'2019-05-02 11:41:01','2019-05-02 10:41:01','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.politico.com/story/2019/05/01/new-privacy-oversight-on-the-table-for-facebook-zuckerberg-1402278\">Nancy Scola wrote in Politico</a> : \'<em>Facebook and the Federal Trade Commission are negotiating a possible settlement that would require the company to place privacy-minded executives at the company\'s highest levels, a source close to the talks told POLITICO on Wednesday — in addition to paying the expected multibillion-dollar fine it disclosed last week.</em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"Facebook should not get to decide what Canadian privacy law does or does not require.” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ashkan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of <a href=\"https://abcnews.go.com/Technology/europes-privacy-watchdog-opens-11th-investigation-facebook/story?id=62626462\">“hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR</a> <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS&nbsp;</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan&nbsp;</a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\' Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;f&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announces :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook changes its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-05-02 11:41:01','2019-05-02 10:41:01','',336,'https://datarainbow.eu/2019/05/02/336-revision-v1/',0,'revision','',0),(372,5,'2019-05-03 14:55:07','2019-05-03 13:55:07','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Bloomberg report : <a href=\"https://news.bloomberglaw.com/securities-law/facebooks-zuckerberg-sued-over-scandals-alleged-insider-trades\">Zuckerberg Sued Over Privacy Scandals, Alleged Insider Trades (1) \"</a><em>Mark Zuckerberg and Facebook Inc.‘s other top executives have been hit with a lawsuit accusing them of insider trading and blaming them for the privacy scandals that have rocked the social media giant and its stock value since 2016.</em>  <em>The shareholder complaint was filed May 1 in Delaware Chancery Court against Zuckerberg, Sheryl Sandberg, Peter Thiel, and three other Facebook board members. It comes about a week after the company announced it expected to pay a fine of up to $5 billion for violating a Federal Trade Commission consent decree requiring better privacy safeguards</em>.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.politico.com/story/2019/05/01/new-privacy-oversight-on-the-table-for-facebook-zuckerberg-1402278\">Nancy Scola wrote in Politico</a> : \'<em>Facebook and the Federal Trade Commission are negotiating a possible settlement that would require the company to place privacy-minded executives at the company\'s highest levels, a source close to the talks told POLITICO on Wednesday — in addition to paying the expected multibillion-dollar fine it disclosed last week.</em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"Facebook should not get to decide what Canadian privacy law does or does not require.” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ashkan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of <a href=\"https://abcnews.go.com/Technology/europes-privacy-watchdog-opens-11th-investigation-facebook/story?id=62626462\">“hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR</a> <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS&nbsp;</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan&nbsp;</a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\' Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;f&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announces :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook changes its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Today in the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-05-03 14:55:07','2019-05-03 13:55:07','',336,'https://datarainbow.eu/2019/05/03/336-revision-v1/',0,'revision','',0),(374,5,'2019-05-03 15:13:28','2019-05-03 14:13:28','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>UPDATE :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook headlines in the news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Bloomberg report : <a href=\"https://news.bloomberglaw.com/securities-law/facebooks-zuckerberg-sued-over-scandals-alleged-insider-trades\">Zuckerberg Sued Over Privacy Scandals, Alleged Insider Trades (1)&nbsp;\"</a><em>Mark Zuckerberg and&nbsp;Facebook Inc.‘s other top executives have been hit with a lawsuit accusing them of insider trading and blaming them for the privacy scandals that have rocked the social media giant and its stock value since 2016.</em>  <em>The shareholder complaint was filed May 1 in Delaware Chancery Court against Zuckerberg, Sheryl Sandberg, Peter Thiel, and three other Facebook board members. It comes about a week after the company announced it expected to pay a fine of up to $5 billion for violating a Federal Trade Commission consent decree requiring better privacy safeguards</em>.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.politico.com/story/2019/05/01/new-privacy-oversight-on-the-table-for-facebook-zuckerberg-1402278\">Nancy Scola wrote in Politico</a> : \'<em>Facebook and the Federal Trade Commission are negotiating a possible settlement that would require the company to place privacy-minded executives at the company\'s highest levels, a source close to the talks told POLITICO on Wednesday — in addition to paying the expected multibillion-dollar fine it disclosed last week.</em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"<em>Facebook should not get to decide what Canadian privacy law does or does not require.</em>” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ashkan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of <a href=\"https://abcnews.go.com/Technology/europes-privacy-watchdog-opens-11th-investigation-facebook/story?id=62626462\">“hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR</a> <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS&nbsp;</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan&nbsp;</a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : \'<em>Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations.</em> \'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\'</em> Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"align\":\"left\"} -->\n<p style=\"text-align:left\"><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’. </a>The head of the European Data Protection board, in charge of the Consistency Mechanism and harmonisation of regulations announced :  “<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook promise it changed its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A new notification tells users events their \'friends\' will attend. Not sure this is going to be much privacy friendly !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-05-03 15:13:28','2019-05-03 14:13:28','',336,'https://datarainbow.eu/2019/05/03/336-revision-v1/',0,'revision','',0),(376,5,'2019-05-07 16:32:05','2019-05-07 15:32:05','<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirements for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":395} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.07.41.png\" alt=\"\" class=\"wp-image-395\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":397} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.15.07.png\" alt=\"\" class=\"wp-image-397\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">here</a> and <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">here</a>. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Hanley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, <a href=\"http://petesdeals.co.uk/\">petesdeals.co.uk</a> , myloanoffers.co.uk, and <a href=\"https://prizereactor.co.uk/\">prizereactors.co.uk</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is deemed as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H namely appeared, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. This is as well valid when website owners commission a work to a web designer,. It is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself]<em> </em>of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty \'without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','publish','closed','closed','','consent-in-direct-marketing','','https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\nhttps://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/','2020-01-18 14:06:20','2020-01-18 14:06:20','',0,'http://datarainbow.eu/?p=376',0,'post','',0),(377,5,'2019-05-07 15:19:22','2019-05-07 14:19:22','','Screenshot 2019-05-07 at 15.18.02','','inherit','closed','closed','','screenshot-2019-05-07-at-15-18-02','','','2019-05-07 15:19:22','2019-05-07 14:19:22','',376,'/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png',0,'attachment','image/png',0),(378,5,'2019-05-07 15:37:28','2019-05-07 14:37:28','','Screenshot 2019-05-07 at 15.36.51','','inherit','closed','closed','','screenshot-2019-05-07-at-15-36-51','','','2019-05-07 15:37:28','2019-05-07 14:37:28','',376,'/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png',0,'attachment','image/png',0),(379,5,'2019-05-07 15:45:55','2019-05-07 14:45:55','','Screenshot 2019-05-07 at 15.45.36','','inherit','closed','closed','','screenshot-2019-05-07-at-15-45-36','','','2019-05-07 15:45:55','2019-05-07 14:45:55','',376,'/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png',0,'attachment','image/png',0),(380,5,'2019-05-07 16:04:43','2019-05-07 15:04:43','','Screenshot 2019-05-07 at 16.04.25','','inherit','closed','closed','','screenshot-2019-05-07-at-16-04-25','','','2019-05-07 16:04:43','2019-05-07 15:04:43','',376,'/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png',0,'attachment','image/png',0),(381,5,'2019-05-07 16:32:05','2019-05-07 15:32:05','<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has <a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a> for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirement for consent in order to send indirect marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Handley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, petesdeals.co.uk , myloanoffers.co.uk, and prizereactors.co.uk</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is seen as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H was mentioned, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. It is valid as well when website owners commission a work to a web designer, it is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself] of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 16:32:05','2019-05-07 15:32:05','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(382,5,'2019-05-07 16:37:38','2019-05-07 15:37:38','<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirement for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Handley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, petesdeals.co.uk , myloanoffers.co.uk, and prizereactors.co.uk</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is seen as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H was mentioned, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. It is valid as well when website owners commission a work to a web designer, it is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself] of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 16:37:38','2019-05-07 15:37:38','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(384,5,'2019-05-07 16:38:03','2019-05-07 15:38:03','','fullsizeoutput_5a','','inherit','closed','closed','','fullsizeoutput_5a','','','2019-05-07 16:38:03','2019-05-07 15:38:03','',376,'/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg',0,'attachment','image/jpeg',0),(385,5,'2019-05-07 16:38:10','2019-05-07 15:38:10','<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirement for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Handley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, petesdeals.co.uk , myloanoffers.co.uk, and prizereactors.co.uk</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is seen as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H was mentioned, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. It is valid as well when website owners commission a work to a web designer, it is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself] of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 16:38:10','2019-05-07 15:38:10','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(386,5,'2019-05-07 16:38:31','2019-05-07 15:38:31','<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /><figcaption>Photo by Geoff Lowe Photographer</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirement for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Handley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, petesdeals.co.uk , myloanoffers.co.uk, and prizereactors.co.uk</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is seen as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H was mentioned, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. It is valid as well when website owners commission a work to a web designer, it is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself] of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 16:38:31','2019-05-07 15:38:31','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(387,5,'2019-05-07 16:39:04','2019-05-07 15:39:04','<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /><figcaption>Photo by Geoff Lowe Photographer</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirement for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Handley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, petesdeals.co.uk , myloanoffers.co.uk, and prizereactors.co.uk</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is seen as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H was mentioned, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. It is valid as well when website owners commission a work to a web designer, it is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself] of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 16:39:04','2019-05-07 15:39:04','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(389,5,'2019-05-07 16:51:29','2019-05-07 15:51:29','<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /><figcaption>Photo by Geoff Lowe Photographer</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirements for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">here</a> and <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">here</a>. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Handley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, petesdeals.co.uk , myloanoffers.co.uk, and prizereactors.co.uk</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is seen as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H was mentioned, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. It is valid as well when website owners commission a work to a web designer, it is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself] of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 16:51:29','2019-05-07 15:51:29','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(391,5,'2019-05-07 16:58:28','2019-05-07 15:58:28','<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /><figcaption>Photo by Geoff Lowe Photographer</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirements for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">here</a> and <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">here</a>. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Hanley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, <a href=\"http://petesdeals.co.uk/\">petesdeals.co.uk</a> , myloanoffers.co.uk, and <a href=\"https://prizereactor.co.uk/\">prizereactors.co.uk</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is deemed as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H namely appeared, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. It is valid as well when website owners commission a work to a web designer, it is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself] of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 16:58:28','2019-05-07 15:58:28','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(393,5,'2019-05-07 17:01:08','2019-05-07 16:01:08','<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /><figcaption>Photo by Geoff Lowe Photographer</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirements for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Currently, consent under the not yet revised PECR and ePrivacy Directive have to be at the GDPR standard. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 32 says \"<em>Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">here</a> and <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">here</a>. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Hanley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, <a href=\"http://petesdeals.co.uk/\">petesdeals.co.uk</a> , myloanoffers.co.uk, and <a href=\"https://prizereactor.co.uk/\">prizereactors.co.uk</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is deemed as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H namely appeared, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. This is as well valid when website owners commission a work to a web designer,. It is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself]<em> </em>of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty \'without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 17:01:08','2019-05-07 16:01:08','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(395,5,'2019-05-07 17:08:27','2019-05-07 16:08:27','','Screenshot 2019-05-07 at 17.07.41','','inherit','closed','closed','','screenshot-2019-05-07-at-17-07-41','','','2019-05-07 17:08:27','2019-05-07 16:08:27','',376,'/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.07.41.png',0,'attachment','image/png',0),(396,5,'2019-05-07 17:09:04','2019-05-07 16:09:04','<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /><figcaption>Photo by Geoff Lowe Photographer</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirements for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":395} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.07.41.png\" alt=\"\" class=\"wp-image-395\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">here</a> and <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">here</a>. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Hanley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, <a href=\"http://petesdeals.co.uk/\">petesdeals.co.uk</a> , myloanoffers.co.uk, and <a href=\"https://prizereactor.co.uk/\">prizereactors.co.uk</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is deemed as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H namely appeared, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. This is as well valid when website owners commission a work to a web designer,. It is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself]<em> </em>of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty \'without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 17:09:04','2019-05-07 16:09:04','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(397,5,'2019-05-07 17:15:52','2019-05-07 16:15:52','','Screenshot 2019-05-07 at 17.15.07','','inherit','closed','closed','','screenshot-2019-05-07-at-17-15-07','','','2019-05-07 17:15:52','2019-05-07 16:15:52','',376,'/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.15.07.png',0,'attachment','image/png',0),(399,5,'2019-05-07 17:16:06','2019-05-07 16:16:06','<!-- wp:image {\"id\":384} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/fullsizeoutput_5a.jpeg\" alt=\"\" class=\"wp-image-384\" /><figcaption>Photo by Geoff Lowe Photographer</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirements for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":395} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.07.41.png\" alt=\"\" class=\"wp-image-395\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":397} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.15.07.png\" alt=\"\" class=\"wp-image-397\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">here</a> and <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">here</a>. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Hanley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, <a href=\"http://petesdeals.co.uk/\">petesdeals.co.uk</a> , myloanoffers.co.uk, and <a href=\"https://prizereactor.co.uk/\">prizereactors.co.uk</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is deemed as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H namely appeared, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. This is as well valid when website owners commission a work to a web designer,. It is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself]<em> </em>of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty \'without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2019-05-07 17:16:06','2019-05-07 16:16:06','',376,'https://datarainbow.eu/2019/05/07/376-revision-v1/',0,'revision','',0),(401,5,'2019-05-09 12:05:32','2019-05-09 11:05:32','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:image {\"id\":345} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/IMG_1081-1024x682.jpg\" alt=\"\" class=\"wp-image-345\" /><figcaption>Picture by Geoff Lowe Photographer @2019</figcaption></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong>UPDATE :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook headlines in the news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Via <a href=\"https://www.linkedin.com/in/mario-guglielmetti-31a57242/\">Mario Guglielmetti </a>: \'<em>the Parliament(s) of 9 countries of the world, calling Mr Zuckerberg to testify on electoral manipulation by his company once more. Canadian Parliament asks for a subpoena. In case Facebook\'s CEO is on Canadian territory, he\'ll be brought to the hearing by force.</em>\'  <a href=\"https://www.cbc.ca/news/politics/facebook-zuckerberg-cambridge-analytica-1.5127007\">Ethics committee votes to subpoena Facebook\'s Mark Zuckerberg to testify</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Bloomberg report : <a href=\"https://news.bloomberglaw.com/securities-law/facebooks-zuckerberg-sued-over-scandals-alleged-insider-trades\">Zuckerberg Sued Over Privacy Scandals, Alleged Insider Trades (1)&nbsp;\"</a><em>Mark Zuckerberg and&nbsp;Facebook Inc.‘s other top executives have been hit with a lawsuit accusing them of insider trading and blaming them for the privacy scandals that have rocked the social media giant and its stock value since 2016.</em>  <em>The shareholder complaint was filed May 1 in Delaware Chancery Court against Zuckerberg, Sheryl Sandberg, Peter Thiel, and three other Facebook board members. It comes about a week after the company announced it expected to pay a fine of up to $5 billion for violating a Federal Trade Commission consent decree requiring better privacy safeguards</em>.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.politico.com/story/2019/05/01/new-privacy-oversight-on-the-table-for-facebook-zuckerberg-1402278\">Nancy Scola wrote in Politico</a> : \'<em>Facebook and the Federal Trade Commission are negotiating a possible settlement that would require the company to place privacy-minded executives at the company\'s highest levels, a source close to the talks told POLITICO on Wednesday — in addition to paying the expected multibillion-dollar fine it disclosed last week.</em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"<em>Facebook should not get to decide what Canadian privacy law does or does not require.</em>” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ashkan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of <a href=\"https://abcnews.go.com/Technology/europes-privacy-watchdog-opens-11th-investigation-facebook/story?id=62626462\">“hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR</a> <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS&nbsp;</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan&nbsp;</a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : \'<em>Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations.</em> \'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\'</em> Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"align\":\"left\"} -->\n<p style=\"text-align:left\"><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;of&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announced :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook promise it changed its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A new notification tells users events their \'friends\' will attend. Not sure this is going to be much privacy friendly !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2019-05-09 12:05:32','2019-05-09 11:05:32','',336,'https://datarainbow.eu/2019/05/09/336-revision-v1/',0,'revision','',0),