logoalt Hacker News

whyohyesterday at 10:27 AM2 repliesview on HN

>sending it to Meta AI would be a AVG (GDPR) violation in the Netherlands if no consent is given as you share it with a third party.

Wouldn't that make "photo cloud backups" without consent illegal as well?

People do that all the time, sending private photos to Google, Apple etc.


Replies

adamaucklandyesterday at 1:50 PM

People send their private photos to their private cloud backups with the reasonable expectation that those photos remain private and therefore not a privacy violation.

If it transpired Google or Apple had staff looking through people's cloud photo backups, yes this would be considered a violation because "cloud backup" is framed as a personal solution and not a hosting or processing solution.

show 1 reply
trashbyesterday at 1:54 PM

Yes, actually the AVG (GDPR) is very broad in what it considers personal data.

Sadly that means it is not enforced well since it is too broad to be enforced in a meaningful way. And therefore it is violated A LOT, both by companies or people since no one can be bothered!

AVG (GDPR) includes the following things as personal data: name, address, phone number, passport photo, information about someone's behavior on websites, allergies, customer or staff numbers, recognizable recordings and more.

Rule of thumb, any information that can be used to relate a specific person.