Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In terms of GDPR:

https://gdpr-info.eu/art-4-gdpr/

> ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;



So you’ve identified a person. What information has been revealed about that person?


It could be anything - the voice snippet could include a query about a particular medical condition or include specific financial records for example.


Anything that falls in that 'personal data' segment above that belongs to me has to be obtained with my prior, explicit consent. And these bits of data with my name or other details in them must be included if I send Google a "right to be forgotten" or "show me all the data you've got about me" request. That's GDPR in a nutshell.

This might be a grey area for now, as both GDPR and listening devices are both quite new. But Google, Amazon & co aren't super popular with EU regulators and governments, so they might side with users' rights on this one.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: