Hacker News new | ask | show | jobs
by daenney 3235 days ago
I would be interested to hear from people with knowledge of EU and US law how shady this is in their respective jurisdictions.

I'm having a hard time imagining what they did is OK, but I'm probably wrong.

1 comments

If you can identify personal data (which if they can tie it to the user's Facebook account, that's pretty easy to do) it's likely (note: not a lawyer) a violation of the EU GDPR regulations (http://www.eugdpr.org/)
Unfortunately GDPR enforcement is about 9 months away. I don't think it applies retroactively.