743
23andMe frantically changed its terms of service to prevent hacked customers from suing
(www.engadget.com)
this post was submitted on 10 Dec 2023
743 points (97.9% liked)
Technology
59646 readers
2563 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
it's almost always a soft delete, that is, change active field in database to false, coupled with their terms of service that state vaguely how they start the deletion process which could take months and how they may still keep certain data for legitimate purposes.
And this is why I wish we adopted GDPR more... if they are compliant, then they have to remove all data held when requested. Too bad the US will never care that much to respect individuals' data like that.
Exactly. I made a GDPR request for deletion. They can get in big trouble if they are soft deleting.
Have they ever been audited?
How does the legal authority work with GDPR if the company's physical and financial operations are entirely within the US? Would the GDPR even be allowed to audit them without their consent?
No idea if they’ve been audited. GDPR doesn’t require it. My understanding is that American companies doing any business or having any users in the EU need to be GDPR compliant for those users. I don’t think that’s been challenged in any courts yet.