Email or username:

Password:

Forgot your password?
European Commission

You are in control of the data you share. Full stop.

The #GDPR has put you in control of your personal data, including enshrining consent to its processing and the right to be forgotten.

As of January, the European Data Act will extend your rights to connected products by making it easy to access and move any data generated – whether it's about personal data or not.

On #DataProtectionDay, we ask you: What are the most important advancements for you? πŸ‘‡

#DataProtection #EU

Anonymous poll

Poll

Right to be forgotten
730
0%
Tracking consent
727
0%
Switching between cloud providers
262
0%
Accessing data from your connected devices
263
0%
0 people voted.
Voting ended 29 January at 8:30.
30 comments
Egon Willighagen

@EU_Commission how does this work for medical data? can I now require hospitals to send me all data they have on me too?

Jordan Maris πŸ‡ͺπŸ‡Ί πŸ‡ΊπŸ‡¦ #NAFO

@egonw @EU_Commission not sure medical data is in scope of the GDPR but yes, hypothetically.

The Data Act also means medical devices will have to make raw data they collect available to you, the end user'

Baron Vonskinnback

@jmaris @egonw @EU_Commission the ICO does cover clinical data, because it was very nearly weaponised against me by a mendacious group of NHS managers, IT departments & trust directors who were looking for a scapegoat for their own incompetence & ignorance, they very nearly had me, I was against the wall & lined up to be prosecuted by the ICO and the CQC personally for the work I did for them that they claimed lead to a data breach, untill they found the actual culprit, then they went very quiet

Lil Meow Meow

@EU_Commission

The problem is that I'm not under the impression that all those who should in the Commission care about the implementation at all. E.g. Thierry Breton.

Furthermore, many tech companies don't give a shit and the most often responsible Irish authorities don't give one either.
If they act, it's almost always because other MS authorities push them or people like Max Schrems successfully sues.

That must change.

Iain Collins

@lil_meow_meow @EU_Commission Agree, not caring about the implementation has been a huge problem.

I wish the EU had aligned behind Do Not Track over a decade ago, and had better understood the implementation of cookie consent enough to have avoided the UX disaster of consent pop-ups everywhere.

I was at a roundtable with reps from Microsoft, Apple, Google and the UK ICO years ago; the EU wasn't listening to people telling them to get behind DNT, even with the FTC, W3C and EFF behind it.

Iain Collins

@lil_meow_meow @EU_Commission Not having a framework for implementation that includes process for escalation has also made it difficult to hold organizations to account and actually get them to uphold their obligations.

On the tracking side, I hope things work out differently this time with Global Privacy Control header and that the European Commission support the initiative.

It has a huge potential for impact, even for those of us outside the EU.

@lil_meow_meow @EU_Commission Not having a framework for implementation that includes process for escalation has also made it difficult to hold organizations to account and actually get them to uphold their obligations.

On the tracking side, I hope things work out differently this time with Global Privacy Control header and that the European Commission support the initiative.

Lil Meow Meow

@iaincollins

The GDPR has already a global effect - "The Brussels Effect" in action.

It could have been much better and larger but I'm mostly offended by the Irish authorities who act more often than not in the interest of tech companies in a shameless sell out of EU citizens.

That's my no.1 demand to change: Centralize the oversight so no member state can attract business by selling our rights out.

@EU_Commission

Pierric

@EU_Commission what we need is to forbid the treatment of tracking data as a currency. Half the websites nowadays blackmail you into consenting to tracking or paying. Yes you can make a subscribers-only website, but no, forfeiting my right to privacy should not be a payment option.
If I go buy bread and the baker says "take off your clothes and this one is for free", that's not okay. This is similar.

Sam Lowry

@EU_Commission The possibility to refuse every kind of AI data mining.

Mastodon Migration

@EU_Commission

General Data Protection Regulation:
- Right to be forgotten
- Tracking consent
- Switching between cloud providers
- Accessing data from your connected devices

#GDPR is fantastic! The US needs to follow the EU's example.

An Internet Bill Of Rights for the United States is long overdue.

#IBOR2024

@EU_Commission

General Data Protection Regulation:
- Right to be forgotten
- Tracking consent
- Switching between cloud providers
- Accessing data from your connected devices

#GDPR is fantastic! The US needs to follow the EU's example.

An Internet Bill Of Rights for the United States is long overdue.

heliumlake

@EU_Commission @mastodonmigration Case in point, I'm dealing with an issue affecting my auto insurance with a large data broker in the US. Essentially information on my report is incorrect, and they are impossible to get a hold of. I've ordered a copy of my report, and I'm sure I'm going to be apalled at what I find in there. Everything I've heard about this company entails gross corporate surveillance. It feels like there is no such thing as privacy.

Dan Sloane

@EU_Commission GDPR rules are sensible, but the implementation, particularly involving US companies to store that consent, has wrecked the usability of the web.

bugbear

@dans @EU_Commission I'm pretty sure that's more about malicious compliance

Simon | SΓ­omΓ³n

@EU_Commission
It might help your respondents if GDPR was actually enforced - but it’s not
Seemingly a feature, not a bug, of this commission, which might possibly surprise someone

noyb.eu/en/data-protection-day

Leeloo

@EU_Commission
If only the GDPR was law here in Denmark πŸ˜₯

I've just had to create an Eboks account (even though I'm exempt from the Danish law that kinda, but not really makes such an account mandatory) because my insurance started sending my bills to Eboks without my consent. When my account was created, after "agreeing" to the usual privacy consent popups with no option to say no, I found over 50 documents (mostly bills) with personal information that had been shared with Eboks without my consent. As well as a list of companies that I had been "opted into" having my data shared with Eboks even though I have never consented.

If this was in - let's say Germany - both Eboks, my insurance and the rest of companies om that list would be looking at huge fines.

@EU_Commission
If only the GDPR was law here in Denmark πŸ˜₯

I've just had to create an Eboks account (even though I'm exempt from the Danish law that kinda, but not really makes such an account mandatory) because my insurance started sending my bills to Eboks without my consent. When my account was created, after "agreeing" to the usual privacy consent popups with no option to say no, I found over 50 documents (mostly bills) with personal information that had been shared with Eboks without my consent....

Tommi Nieminen

@EU_Commission From a private citizen's viewpoint #GDPR is great, but it sure made linguistic research difficult! Nowadays it's next to impossible to collect speech data as it was used to from the late 1800's right up to GDPR.

Patrice

@EU_Commission
Please stop the transatlantic sharing, they can't keep their own secrets safe...

arstechnica.com/security/2024/

PS: only a few months remaining to correct all the mistakes :/

fdlamotte

@EU_Commission

I would love not to be forced to use US proprietary platforms (Android/GPlay, Apple, MS, Amazon ...) to access any digital service (transport, banking, digital identity ...) in the EU

Please give us back digital sovereignty

LonM

@EU_Commission tracking consent is nonsense. You can't consent to give up your right to privacy. Tracking and sale of data should just be banned outright.

DELETED

@EU_Commission No. Not for social networks, and without committing an offence (regarding laws). All they have to do is decide that "the right to deletion of personal data is described in Article 17 of the GDPR. This right is not absolute and only applies in certain circumstances." That is, in the circumstances they (themselves) choose. So they just block the account, which we can't have deleted.
GDPR if they want, no right.

DELETED

@EU_Commission And for companies, associations, employment agencies, etc. (with no obligation to retain data for legal reasons), even your user accounts rarely / never used after creation, it's complicated + time-consuming to get them deleted. You have to ask svrl times, many @ contacts, tell you're going to report it. Sometimes you also have to prove yr ID whereas not justified (you didn't prove it to create accnt, no purchase/service used, no content, also they mix data from different users!).

Emelia πŸ‘ΈπŸ»

@EU_Commission none of these: instead I want stronger laws limiting the usage of data brokers & stricter terms for what "legitimate interest" means for cookies & third-parties: I regularly see websites with hundreds of "legitimate interest" "partners" – there's no way that's being responsible with my data.

Also making one-click opt-out of non-functional cookies mandatory: many sites lack this.

Natasha Nox πŸ‡ΊπŸ‡¦πŸ‡΅πŸ‡Έ

@EU_Commission "You are in control of the data you share. Full stop."

πŸ˜‚ Yeah, ehrm, not really. Data brokerage, Web tracking, manipulative cookie banners, opt-out features in smartphones, corporate social media deemed necessary to find jobs etc., scoring-bullshit like SCHUFA, TOS of almost unavoidable services ("Gatekeepers") that still collect data en mass and last but lot least YOU (with all yoir chatcontrol and total surveillance fantasies) completely and utterly invalidate your statement.

Natasha Nox πŸ‡ΊπŸ‡¦πŸ‡΅πŸ‡Έ

@EU_Commission Also about tracking consent: do you realize how little thowe companies give a fuck? Not even companies owned by the very states of the EU do! (Here for example: heise.de/news/Bahn-App-Buerger )

Go Up