Profile picture
Mustafa Al-Bassam @musalbas
, 9 tweets, 5 min read Read on Twitter
So British Airways is asking for people's personal data over social media "to comply with GDPR", and some people are even replying directly in the public feed.

uwotm8
People started taking the piss out of British Airways by also asking for their customers' personal details, so they had to add an addendum 6 hours later to clarify that the customer should send the info over DM.
The plot thickens. @British_Airways only lets you check-in online after you disable your adblocker, so that they can leak your booking details to tons of third party advertisers and trackers, including Twitter, LinkedIn and Google DoubleClick.
So @British_Airways asks for people's personal details on social media "to comply with GDPR", yet they leak your booking details to tons of third parties when you check in online. I think you're doing GDPR wrong...
They irony to all of this by the way, is that this is in relation to my flight to Barcelona for Privacy Enhancing Technologies Symposium.
Looks like some people are wiser than @British_Airways's requests for customers to share personal detail over social media "to comply with GDPR"
It's still happening. People are posting their address publicly on Twitter because @British_Airways asked for them as GDPR requires customer identification. How can you get GDPR so wrong?
And now this.
Here is @British_Airways' response to the online tracking issue, for those following from the main thread:
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Mustafa Al-Bassam
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @musalbas see all

Profile picture
Ian Levy of GCHQ has released an essay on how law enforcement should get access to end-to-end encrypted communications. Here is the critical bit to pay attention to.

They're proposing to exploit the fact that users don't verify each other's public keys, and inject bad keys.
We've been fortunate enough to not have a global active adversary that is willing to manipulate packets on a large scale, so end-to-end encrypted chat systems didn't have to focus much on the key verification problem. That looks like it's going to change:
In light of this, user-friendly key verification is going to be increasingly important, as will systems such as Key Transparency which make it so that any misbehaviour on the part of the server in key management will be publicly detectable, even if users don't verify keys.
Read 7 tweets

Related threads

Profile picture
Your work history is distinct, more than most passwords. Your resume identifies you (who else had your last 2 to 4 jobs?) even without your name/photo. @LinkedIn as a social network relies on the collective trust of its users to honor the contexts of career and work.
#GDPR makes @LinkedIn accountable for how the company sticks to promised uses of your data, but GDPR doesn't cover how other members of the network use or abuse your information. Social norms (and peer payback like @LeenaVanD offers) can raise the stakes. But abuse happens.
Most data protection laws deal with the relationship between you and companies. The next round of laws will start to cover data in motion (chat, calls, data in transit). But they also should start to consider person-to-person use/abuse of your data. #gdpr #privacy @IdentityWoman
Read 9 tweets
Profile picture
Over the past weeks, the 🇪🇺 Parliament has issued two reports on #blockchain. I'll summarize the key points below.

👇
First, an Opinion by the Committee on Civil Liberties, Justice and Home Affairs, which considers the tech 'capable of decentralising forms of human interaction, the markets, banking and international trade'.

europarl.europa.eu/committees/en/…
It informed the 2nd report I'll mention below and focused on the #GDPR, stressing the capacity of blockchains for data protection by design. It mentions zk-SNARKs specifically (but remains mum on implications for AML etc).
Read 17 tweets
Profile picture
This is a good question: what is the root cause of the lack of privacy online today? Why does media track so much? My personal take is that it boils down to browsers and mobile platforms. Not only is that the master fix, but it is within reach. Follow the thread❗👇
First, I have some assumptions that I want to ensure you know:
1) Without a free and well-funded press before long we'd have no privacy at all. This does NOT justify an exception regime for media, but it constrains the solution. Getting rid of media is not the right option.
2) I do not buy into strict deontologism. It's not enough to make a rule, we need to make it work. If you force people into a choice between the law and survival, don't be surprised that they at least bend the rules. If you incentivise defection, expect defectors.
Read 20 tweets
Profile picture
UCC had opportunity to comment on the #Data.Protection & Privacy Bill. The enactment of this law is long overdue. A comprehensive law on the collection & processing personal information gives effect to the right to Privacy envisaged under Article 27(2) of the Constitution
UCC welcome the protections offered by the Bill in terms of export of data, breach notification requirements, data subjects access rights, automated decision making, compensation and the right to be forgotten and provision for financial and penal sanctions for breach of the law.
Distinction between Data collectors & data controllers.
The Bill should however clarify & distinguish Data Collectors, from Data Processors & Data Controllers. Clause 2 is inconsistent with international good practice which provides for two broad categories of Data Controllers
Read 17 tweets
Profile picture
Facebook is confronting EU users a new “terms of service” dialogue that denies access until a user opt-ins to tracking for ad targeting, and various other data processing purposes...
These Terms refer to the “data policy” that says “we use the information we have about you – including information about your interests, actions and connections – to select and personalise ads, offers and other sponsored content that we show you.”
The data policy also says “We use the information [including] the websites you visit and ads you see … to help advertisers and other partners measure the effectiveness and distribution of their ads and services, and…” See facebook.com/about/privacy/…
Read 37 tweets
Profile picture
Looks like another early-morning wake-up to catch Cambridge Analytica's regulator @ICOnews giving oral evidence to @CommonsCMS tomorrow. I might be livetweeting the livestream if Information Commissioner Elizabeth Denham offers any new revelations. parliament.uk/business/commi…
2/ Hopefully you've seen @Billbrowder give testimony about his Magnitsky Act campaign. Despite his accent, he's a British citizen, asked to talk about disinformation campaign waged against him. @DamianCollins jests that Russian Embassy and Brietbart have gone after @CommonsCMS
3/ @edwardlucas articulates how "fairness doctrine" in media coverage can be exploited by Kremlin propaganda mouthpieces that spray doubt over reasonable positions as media especially BBC oblige 'both sides' rather than understand that position as state propaganda.
Read 32 tweets

Trending hashtags

#5G #jurisdiction #Dailymirror #LondonMayor #Suisse #LatestNews #marcallera #WeaponizedWater #corruption #Euronews #DrPhil #sales #GDPR #DataProtection #insurance #Independent #bbcr4today #immoral #Emerdata #prepping #UKBusinessLunch #news #metpolice #politics #lovewhatyoudo

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!