Hacker News new | ask | show | jobs
by privacylawthrow 1263 days ago
It's very much how most privacy laws work.

According to Revue's platform privacy policy[0], Revue processes subscriber emails as a data processor. Each newsletter publisher owns the email addresses of their respective audiences. Revue would have a legal obligation to make those email addresses available to the newsletter publishers until the shutdown date.

[0]: https://www.getrevue.co/privacy/platform?locale=en

1 comments

Their privacy policy very strongly suggests that they are the data processor only when the account owner (Publisher) provides the email address, which they call indirect subscription.

Direct subscribers are users who subscribed themselves via the Revue service. and the privacy policy says nothing about providing direct subscribers' private data to the Publisher.

Their closure announcement does not distinguish between the types of subscriber.

So either the Publisher is only getting the indirect subscribers' info (and isn't being told they are losing the direct subscribers) or the Publisher is getting direct subscriber info which the direct subscriber never agreed to allowing (unless that is a separate agreement from the privacy policy, in which case presumably some permission was indeed obtained).