"The PSD2 'Open Banking' regulation has forced banks to open up consumer data via APIs..."
...so that companies can now exploit yet another category of personal information - bank transaction data - for marketing surveillance (and credit assessment etc). rippll.com/index#open
I disagree. Practically, most people won't get "power over their banking data". In most cases, predatory data and fintech companies will get power over their banking data.
I'm not cynical, the companies who exploit data are. PSD2 and 'open banking' are now used by all kinds of actors to exploit banking data for everything from marketing surveillance to credit scoring and even tenant screening.
Establishing markets cannot be an end to itself. Mandating personal data interoperability *can* make sense, but without strictly enforced limits and considering the political economy of data it will lead to yet another cesspool of data exploitation by both small and large firms.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Dass öffentliche Stellen - wie hier das Land Oberösterreich - es nicht mal auf so sensiblen Seiten wie der Anmeldung für die Impfung schaffen, ohne Datenübertragung an Google (samt zwangsweiser "Einwilligung") auszukommen, ist echt eine Bankrotterklärung. land-oberoesterreich.gv.at/files/covid19i…
Laut Datenschutzerklärung gehts um Google reCaptcha, ein Dienst, der das Anmeldeformular vor Bots und Manipulationen etc schützen soll: land-oberoesterreich.gv.at/files/covid19i…
reCaptcha ist aber sehr datenintensiv+intransparent. Es gibt Alternativen. Sollten die nicht reichen, brauchts welche.
Wenn ich die Seite aufrufe, wird alles mögliche an Google übertragen, einiges davon in Cookies gespeichert, inkl. "_ga" Cookie. Würde sagen, da ist einiges an personenbezogenen Daten dabei, das weit über die IP hinausgeht.
(die Formularinhalte werden nicht an Google übertragen)
"Several large data brokers and adtech companies are still reselling data on millions from shady sources. They must urgently clean up their data supply chain, and they must be held responsible"
Amazon resold "granular location data from X-Mode, a controversial firm that collected at least some of its data without informed consent. X-Mode, whose customers include U.S. military contractors, obtained data from Muslim Pro…"
"Motherboard first contacted AWS ... at the start of January and did not receive a response. Some time later, the listings were removed ... It is not clear whether AWS itself removed them or whether X-Mode did ... Neither company responded to multiple requests for comment"
Regardless of the announced update, what kind of personal information does Whatsapp currently share with FB, according to its website?
- account+device info
- transaction data
- service-related information
- information on how you interact with others
Basically, all metadata.
Personal data Whatsapp shares with Facebook "may include other information identified in the Privacy Policy section entitled ‘Information We Collect’ or obtained upon notice to you or based on your consent"
According to the current privacy policy for non-EU users, Facebook may use Whatsapp (meta)data for all kinds of extensive digital profiling including for "product suggestions (for example, of friends or connections, or of interesting content) and showing relevant offers and ads".
It may not primarily be about past body/health data.
But in addition to Fitbit's hw/sw/brand/workforce, it's about ongoing access to future device data and taking control over user+b2b relationships in order to expand Google/Alphabet's intermediary/healthcare/insurance business.
Austrian telco A1 with 25 million customers in Austria, Bulgaria, Croatia, Slovenia, Serbia, North Macedonia and Belarus announces to sell 'insights into the movement of people' based on 'aggregate'+'anonymized' location data via @here's data marketplace: here.com/sites/g/files/…
Exploiting the pandemic to expand on commercial location data business, great.
"Our analytics product, A1 Mobility Insights, has already proven itself to be considerably helpful during the current coronavirus crisis. By joining the HERE Marketplace, we can go a step further"
'A1 Mobility Insights' is provided together with invenium.io. According to the FAQ, A1 'replaces' IMSI numbers with daily changing 'random IDs' before sharing data with Invenium.
Letzten März war ich kompromissbereit, was die Auswertung von aggregierten Mobilfunk-Bewegungsdaten für gemeinwohlorientierte epidemiologische Zwecke betrifft. Vielleicht ein Fehler.
Invenium sagt, man nutze Standortdaten von A1 inkl. Bob/Yesss/RedBullMobile und decke damit in AT 43% ab.
Auch wenn "je nach Projektanforderung" eine Gruppierung auf 20 Personen erfolge, werden laut FAQ pseudonymisierte personenbezogene Daten verarbeitet. invenium.io/de/blog/2020-1…
Invenium behauptet, die österreichische Datenschutzbehörde und der TÜV Saarland hätten deren "Anonymisierungsverfahren als datenschutzkonform bestätigt", ebenso eine "Studie der führenden Rechtsexperten der Universität Wien".
Denke, das sollte dringend nochmals geprüft werden.