Hacker News new | ask | show | jobs
by basejumping 2105 days ago
I didn't even receive a LI email, checked my spam as well, yet I can login to slideshare and see my account with full name and profile scraped from my LI account. Great!

By the way, my email is marked private on my linkedin account, but now it's on slideshare. So selling information you marked as private!
1 comments
dathinab 2105 days ago
But how can you be sure you data didn't fit shared the moment you did login with linkedln?
link
emn13 2105 days ago
I can't quite parse your sentence (typo?) but I think you mean to ask whether it's possible that LinkedIn shared the PII when the user used their LinkedIn account to login to Scribd?

Doing so would in any case (I assume) violate the GDPR if LinkedIn doesn't doesn't have your informed consent for that. Perhaps their trying to weasel this under the "technically necessary" exception, but that strikes me as unlikely to hold water - at best they'd need to share some minimal token (e.g. if you sign in via google or some other auth provider, you get told what data google will share in advance, and it's possible to share fairly little).

link
dathinab 2102 days ago
Yes that is what I meant, to late to edit.

The problem is that you might have "force opt. in" into a TOS agreement which states you allow the data transfer. So depending on the sign up with linkedln dialog it might have been legal...

link
emn13 2100 days ago
Consent must specifically be freely given; it's not a valid basis if it's "forced opt in" in a TOS. I'm not sure if there's any jurisprudence here (on exactly what freely given means). Even if consent with a TOS were to be considered freely given (I don't think so, but IANAL), it would still need to be clear, and most TOS fail to clear that hurdle. At best it would be a push, and in principle if the legal basis in invalid, punishments can be just as severe as if you hadn't bothered trying at all (although clearly the enforcement at the moment still appears to give violators a lot of chances to repair any issues; so in practice a seemingly reasonable if invalid attempt might at least buy some temporary reprieve if every enforcement comes knocking).
link