Hacker News new | ask | show | jobs
by jenscow 2697 days ago
In that case, if I stored your date of birth then I'd also have to "disclose" your age and star-sign.
1 comments

Only if you actively stored or processed their age or star sign. It's not 'disclose every possible inference you could make given the data you hold'
What if you don't store the inference, but instead process it when needed internally in a function?

  if (dob.month == december) $birthstone = quartz
  select advert from adverts where stone = $birthstone
Or whatever
For ads, you probably don't need to tell people about the "birthstone". But if that automatic processing "produces legal effects concerning him or her or similarly significantly affects him or her" (such as denying a credit card or job offer), then you have to give the person "meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for [them]."
GDPR requires that you log when you use information from a user in models, reports etc so this would probably have to be logged and disclosed.

You would also need explicit concent to use the date of birth for advertising purposes.