Hacker News new | ask | show | jobs
by mziel 3051 days ago
I will repeat my comment as you seem to be repeating the same argument.

It's not "consent" as understood by GPDR and ePrivacy. You had no recourse not to give it, therefore it was not willing and informed. Implied consent ("agree or leave") is not deemed sufficient by GDPR. According to the law you can't condition the service you're providing on collecting unrelated (to that service) data.

1 comments

GDPR is a new law that's not even codified in most of the EU. FB is an USA company.
GDPR has been there for 2 years [1] and will start to be enforced come May. Facebook has a presence in the EU, since they're selling data about European users to European companies. Therefore they need to comply with European law.

[1] http://eur-lex.europa.eu/eli/reg/2016/679/oj