Here's a question for data protection nerds. Imagine you go to your local phone shop and buy a sim locked phone (tied to a particular network) . The device is made by a Chinese manufacturer
Now imagine it turns out personal stuff like location etc was being siphoned from the device to said Chinese manufacturer (possibly too to the Chinese government) without consent.
Under GDPR, who is liable, and is there recourse?
Under GDPR, who is liable, and is there recourse?
Are the network providers selling the phones doing technical due diligence? Are they supposed to? Surreptitious monitoring on the device by the device manufacturer would be illegal, and seems like not much recourse for EU citizen? Would the EU sanction such companies?
