Hacker News new | ask | show | jobs
by soared 2234 days ago
Isn’t data this granular illegal, at least in the US? Obviously trying to make the data anonymous does nothing if you can still see the same user over time - I’ve only ever seen this data with users put into groups, and data points fuzzed.
1 comments
ggggtez 2234 days ago
>is granular location data illegal

Generally speaking, there are no laws against merely possessing data, unless the data itself was the result of a crime.

Maybe you mean selling the data? That's nuanced. It seems to be illegal for phone-companies to sell your real-time cellphone location... but historical data? App developers instead of phone companies? The devil is probably in the details in terms of what constitutes a crime and what is just shady business. See [1] where AT&T sells your location data but insists it's not technically illegal (but claims they stopped selling it anyway).

Many companies try to anonymise this data anyway because it's good business to not piss off your customers.

[1] https://www.theverge.com/2019/5/17/18629553/att-t-mobile-spr...

link
PeterisP 2234 days ago
The article is about Norway, and there are laws against merely possessing data, namely the GDPR. To be specific, "merely possessing" private data (the granular movement data would qualify) by companies for business purposes is illegal by default - there are many options that give a legal basis for processing, and many of them do not require the user's consent, but it's upon the company to demonstrate what gives them the permission to do that, and having no justification (if the company "just has it") means that the processing is illegal. And even if the company has a legitimate reason for processing as such, doing so "without your knowledge" is generally illegal, as even where consent is not required, they are required to inform the data subject about the purposes of processing their private data.

It's not about selling data - purchasing the data or having it or using it also are covered.

link
ggggtez 2234 days ago
The above poster's question was specifically about the US.

GDPR does not cover the US. Europe has more privacy laws than the US does.

link