Even though the GDPR has not yet entered into force, the field of security and the legitimacy of working with personal data is becoming more intense. And existing laws are enough to do it.
The Berlin court, informed consent and the threat of fines
According to a German court, Facebook violated data protection law. It did not obtain informed consent for the use of some of this data. Worldwide news agencies reported this, citing a statement by the German consumer protection association VZBV.
The Berlin court reportedly ordered a modification of the conditions for the handling of personal data, in the event of non-compliance with which Facebook faces a fine of up to 6.5 million Kroner for each confirmed offence.
In Germany, technology, IT and marketing companies in general are now coming under scrutiny from the authorities for their handling of personal data they use to better target online advertising.
“Facebook hides privacy-invasive default settings in the menu and doesn’t provide enough information about them the moment a user signs up. This does not fulfill the essence of informed consent,” said Heiko Dünkel of the VZBV.
According to the court, it is unlawful to track a user’s location when communicating privately via an online app or displaying user profiles in internet search engine results. Facebook, however, stressed that much has changed since the trial began in 2015, and more changes are to come. Facebook plans to appeal the ruling.
This example just goes to show that you really need to focus on working with personal data and not underestimate it, as the rules are going to get much stricter with the advent of GDPR. Whether you’re a huge global company or a family business with two employees, the rules are the same! If you want to avoid problems, be prepared and ideally contact experts to help you.
Source:novnky.cz