Hacker News new | ask | show | jobs
by advisedwang 1597 days ago
GDPR Article 22 (the rule you refer to) also has exceptions:

> Paragraph 1 shall not apply if the decision...is necessary for...performance of, a contract between the data subject and a data controller

Which I can see applying as they probably have something in the ToS to enforce here.

It also allows automated decision making to comply with EU law. I don't know EU copyright law well enough, maybe Google has a responsibility to take down that data under copyright law and so this exception applies too.

1 comments

The ToS does not constrain the company! The agreement does not stipulate that the platform _has_ to enforce ToS, so this is not a necessary action to perform the contract.