Profile picture
Gabriela Zanfir-Fortuna
@gabrielazanfir
, 3 tweets, 2 min read Read on Twitter
The Spanish DPA issued its first major GDPR fine - $283,000, against the Professional Football League. The League's mobile app obtained access to microphones after user accepted T&C, turned them on once every minute during matches (1/2)
...and cross-referenced w location data to identify bars that broadcasted matches without paying for a license. There was no clear info about this practice and no possibility to withdraw consent. Thanks @EgilGlez for pointing this out. (2/2) eldiario.es/tecnologia/Age…
Later add-on. See also this thread by my colleague @staceygraydc looking into the technology used by La Liga to pull this off
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Gabriela Zanfir-Fortuna
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @gabrielazanfir see all

Profile picture
Gabriela Zanfir-Fortuna
@gabrielazanfir
The #EDPB published the *long awaited* draft #GDPR Territorial Scope #Guidelines today, which also have a section dedicated to the “legal representative” issue. Some takeaways below ⬇️ Thread time 1/14 edpb.europa.eu/sites/edpb/fil…
An “establishment” of a non-EU entity in the EU doesn't require a registered branch/subsidiary. Any stable arrangements will be taken into account 4 data protection law purposes.But merely the fact that the company’s website is accessible from the EU is not an "establishment"2/14
A processor in the EU is not deemed to be an “establishment” of the non-EU controller in the EU. The existence of the controller-processor relationship does not trigger the application of the #GDPR to the non-EU controller 3/14
Read 14 tweets

Related threads

Profile picture
Stacey Gray
@staceygraydc
My observations on the Spanish DPA #GDPR fine (thread): First, @LaLigaEN still arguing a yr later that their tech is misunderstood. App uses "audio fingerprinting" by which tiny fragments of audio sent for comparison w/content library & then discarded. 1/9
& on this basis they argue that the processing =/= personal data. The use case (detecting unlicensed soccer streaming) makes it challenging: wouldn't a common ID be needed to cross-reference audio + geo? But if not associated w/ user at point of collection? Maybe. 2/9
Side note: audio fingerprinting is pretty common: Shazam, the latest Pixels, & in most Smart TVs for viewing measurement. Greatest concerns for privacy advocates are if/when used between devices (e.g. phone/laptop surreptitiously "listening" for TV content, as done here). 3/9
Read 9 tweets
Profile picture
Mohamad Hazim
@ajimomarinos
Truecaller kantoi jual data user. Jual pulak kt darkweb. Yang pakai app Trucaller, boleh dah tu kalau nak detele skrg.
Aku tau truecaller ni app yg berguna. Bnyk call dari scammer kita block. Antara best feature Truecaller ialah, dia bgtau nama caller even kita tak save nombor.

How truecaller did that? Masa first install truecaller, kita dngn rela hati bg permission utk akses contact dlm phone.
Bila dh dapat akses contact, dia bukan save no kita je tau, tapi, dia dpt akses kt ratusan contact yg ada dlm phone. Bila ada let 5000 user with 100 contacts in each phone, Truecaller own 500000 of our number.

Do you think it is fair for your friends and family in contact list?
Read 13 tweets
Profile picture
Lukasz Olejnik
@lukOlejnik
First #GDPR fine by Polish DPA. 6M records in database. Scrapped from public sources. Not informed data subjects about their rights. 229k EUR fine. Breach of Article 14. Impressive: no particular explanation provided.
English press release related to the first PL #GDPR fine. 6M user data scraped from public registers. Not informed data subjects about their rights. €220k fine. No tech component; purely lawful case. uodo.gov.pl/en/553/1009
Full justification of the #GDPR enforcement here. 220k fine is only one thing. Company has been ordered to inform all the 6M data subjects. Costs might exceed the fine. Full GDPR in action here. uodo.gov.pl/decyzje/ZSPR.4… (via G/translate)
Read 5 tweets
Profile picture
Bernieri Christian
@prevenzione
1/4 This is huge!! As far as I know, the UE has issued the FIRST Rapid Alert (#RAPEX) for dangerous products that may be related to data protection and #Privacy.
This drive me crazy: the product is a smartwatch for MONITORING KIDS (#ENOX SAFE KID ONE with GSM and GPS integrated)
2/4 Now the #smartwatch must be recalled from end users! The App, the server and the watch has no security in data transmission. The risk is very high due to young users… I hope that this will be notified to #DPA too for #GDPR enforcement.
3/4 I’m very happy to see #dangerous #products withdrawn from the market due to lack of data protection. It is the very first time. I hope that the monitoring system will keep on focusing on data protection. ec.europa.eu/consumers/cons…
Read 5 tweets
Profile picture
Jordan Moore
@jordanmoore
A responsive design should preserve and protect _content_ across different conditions. A responsive design owes little to the preservation of an _interface_ across different conditions.
I'll unpack this a bit more in a blog post.
(Sorry Twitter threads are lower friction than blogging for me at this point in time, I'll unpack here).

At a UI level, mobile apps look different to responsive designs. That's always bothered me and I could never quite put my finger on why.
Read 16 tweets
Profile picture
Jeffrey Peterson🇺🇸
@realJeffreyP
Does AUSA Moira Kim Penza, prosecutor in the fed. #NXIVM #RICO criminal racketeering case, realize that her indictments of #NXIVM leader, Keith Raniere aka "Vanguard," last March, may have affected the outcome of the 2018 Mexican Presidential Election? #ArizonaMafia #Democrats
Moira Kim Penza is 1 of the main prosecutors in the federal #NXIVM #RICO criminal case. A #RICO case is very serious; it is 1 of the most complex types of prosecutions the U.S. Government can initiate. Moira's boss is Richard P. Donoghue, U.S. Atty for the Eastern District of NY.
Penza is a smart lawyer. According to publicly available information, she studied at Cornell Law School, a private Ivy League University located in Ithaca, New York. Cornell was ranked the #13 law school in America, out of 203 law schools, by U.S. News & World Report, in 2018.
Read 117 tweets

Trending hashtags

#feminicídios #AraCon2019 #RogerHowarth #DegrassiNextClass #millionaires #MoraloftheStory #Corey #Billy #BH90210 #ETHLend #Vesuvius #Tristian #Maya #retweet #Allisaac #falseallegations #SWAB #Mexicans #products #Designs #richmondtimes #libertad #Barney #Shangela #Democrat
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!