General Data Protection Regulation (“GDPR”)

145 readers

11 users here now

Everything related to the #GDPR is discussed here. This is the first and only community specifically for GDPR topics which is decentralized and outside of walled-gardens. #EDPB recommendations and guidance can and should also be discussed here.

For the moment, chatter on the similar California Consumer Privacy Act (CCPA) could be discussed at least until the volume of messages compels us to split it into a separate community.

founded 1 year ago

MODERATORS

freedomPusher@sopuli.xyz

French DPA: forcing SNCF customers to specify “Mr.” or “Mrs.” when buying a train ticket does not violate data minimisation... (www.vbb.com)

submitted 2 days ago by ciferecaNinjo@fedia.io to c/gdpr@sopuli.xyz

3 comments fedilink hide all child comments

Wow, so that’s bizarre. I wonder why the French DPA would think it’s okay to force customers to reveal their gender. Luckily the CJEU overruled them and made it right in the end. But of course it’s still disturbing when a DPA is working against privacy rights.

top 3 comments

sorted by: hot top controversial new old

[–] drolex@sopuli.xyz 2 points 2 days ago (1 children)

I've asked in the past for something similar and it's to keep consistency with ID documents.

In other words, it is the way it is because the way it is is that way.

[–] ciferecaNinjo@fedia.io 2 points 2 days ago (1 children)

Well that rationale doesn’t withstand the fact that people can change their gender identity without updating their ID docs. Recipe for disaster.

[–] drolex@sopuli.xyz 1 points 2 days ago* (last edited 2 days ago)

I suppose this is exactly the idea: sex assigned at birth. It's a somewhat aggressively neutral concept. Neutral because it just takes something that is already given independently from you. But also very stupid and backwards yeah.

Completely in line with bureaucratic standards. It doesn't judge but also can be a constant reminder of potential traumas.