[latexr]

> For those who received or signed a document through Dropbox Sign, but never created an account, email addresses and names were also exposed.

So they also leaked data of people who are not their customers, and who never agreed to have their information collected.

I doubt that flies under the GDPR.

[SoftTalker]

In the grand scheme of things, expecting your name and email address to really stay private is not all that reasonable. You probably gave them to the person who then used Dropbox Sign to send you a document. If you were really worried you could have used a throwaway account. The old saying is, once you tell someone, it's no longer a secret.

[latexr]

> In the grand scheme of things, expecting your name and email address to really stay private is not all that reasonable.

In the grand scheme of things, nothing matters and we’re all going to die. It’s been a while since I read the GDPR, but I don’t remember a section titled “personal data which is OK to leak because it doesn’t matter in the grand scheme of things *shrug emoji*”.

> You probably gave them to the person who then used Dropbox Sign to send you a document. If you were really worried you could have used a throwaway account.

Yes, you probably did. And that’s irrelevant. That data should’ve been deleted once it was no longer relevant. Almost no one goes around giving throwaway email accounts to acquaintances. Do you also suggest people have a throwaway phone number they give to friends and family, for when they upload it to a service like WhatsApp?

[asgrdz]

> In the grand scheme of things, nothing matters and we’re all going to die. It’s been a while since I read the GDPR, but I don’t remember a section titled “personal data which is OK to leak because it doesn’t matter in the grand scheme of things

Best comment on HN. Ever.

Both clever and informative on so many levels. It seems half of the HN crowd work in the Ad industry and never cease coming up with ridiculous excuses for why it's OK to abuse other people's PII. I was surprised to see there wasn't the usual gnawing of teeth this time, about the GDPR which tend to follow whenever that fine regulation is mentioned.