#gdmr — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #gdmr, aggregated by home.social.
-
RE: https://techhub.social/@Techmeme/116606089296164399
Remember this whenever you hear claims that your data is secure on some system or other that you do not own and control.
Like all that additional data governments want to gather via the slippery slope of “age verification” in the EU.
The only data that is actually secure on a third party is data you haven’t shared with the third party.
Hence: data minimisation.
Had I mentioned GDMR yet today? Because I feel I might have. But hey, here it is again:
-
When you hear that someone is a “privacy professional”, you know two things about them:
1. That they work in the field of privacy
2. That someone pays them to do thatSo ask:
Who is paying you?
(Always follow the money.)
Based on the answer, you’ll know whether their job is to protect your privacy or to find ways of legitimising their employer’s business model that’s predicated on violating your privacy.
Also, ask yourself: who has the most money?
Then you’ll know who can afford to hire the largest number of “privacy professionals.” Hint: trillion-dollar corporations are called trillion-dollar corporations for a reason.
(Wait a minute, am I really saying that most “privacy professionals” are hired to help corporations violate your privacy, not protect it? That’s a yes.)
Finally, have a little read up on “revolving doors” to understand that for some of these “privacy professionals”, a job is just a job and they will happily flip between the two because, really, it’s all just a game to some people when you have a certain level of privilege.
I was once censured by the Nordic Privacy Arena – a conference that “aims to be part of the privacy professional’s journey” where I was presenting a keynote – for criticising the keynote by a Facebook employee (a lawyer who was a “privacy professional”). What was that Facebook employee’s previous job, you ask? Oh, he worked at the French data protection office (CNIL). And that, kids, is what we call a revolving door.
(Last year, Nordic Privacy Arena had four speakers from Google as well as a speaker from Capgemini – whose US subsidiary has a contract to provide surveillance and tracking services to ICE* – and Salesforce**. Not to mention a representative from the Irish Data Protection Commission. You know, the folks who enforce GDPR to the extent that they’re sued by @noybeu to do so. If you don’t know how corrupt Ireland is on this, read the excerpt from the Facebook whistleblower’s book, Careless People, that I quote in this post: https://ar.al/2025/03/21/careless-people/)
And none of this is going to change if we continue with the framing of “data protection”. We must make this whole business model illegal.
We must go beyond GDPR to GDMR: General Data Minimisation Regulation.
* https://www.surveillancewatch.io/entities/capgemini
** https://dpforum.se/nordic-privacy-arena/nordic-privacy-arena-2026/#CPDP2026 #CPDP #NordicPrivacyArena #dataProtection #privacyWashing #institutionalCorruption #revolvingDoors #usefulIdiots #privacy #humanRights #GDPR #GDMR
-
When you hear that someone is a “privacy professional”, you know two things about them:
1. That they work in the field of privacy
2. That someone pays them to do thatSo ask:
Who is paying you?
(Always follow the money.)
Based on the answer, you’ll know whether their job is to protect your privacy or to find ways of legitimising their employer’s business model that’s predicated on violating your privacy.
Also, ask yourself: who has the most money?
Then you’ll know who can afford to hire the largest number of “privacy professionals.” Hint: trillion-dollar corporations are called trillion-dollar corporations for a reason.
(Wait a minute, am I really saying that most “privacy professionals” are hired to help corporations violate your privacy, not protect it? That’s a yes.)
Finally, have a little read up on “revolving doors” to understand that for some of these “privacy professionals”, a job is just a job and they will happily flip between the two because, really, it’s all just a game to some people when you have a certain level of privilege.
I was once censured by the Nordic Privacy Arena – a conference that “aims to be part of the privacy professional’s journey” where I was presenting a keynote – for criticising the keynote by a Facebook employee (a lawyer who was a “privacy professional”). What was that Facebook employee’s previous job, you ask? Oh, he worked at the French data protection office (CNIL). And that, kids, is what we call a revolving door.
(Last year, Nordic Privacy Arena had four speakers from Google as well as a speaker from Capgemini – whose US subsidiary has a contract to provide surveillance and tracking services to ICE* – and Salesforce**. Not to mention a representative from the Irish Data Protection Commission. You know, the folks who enforce GDPR to the extent that they’re sued by @noybeu to do so. If you don’t know how corrupt Ireland is on this, read the excerpt from the Facebook whistleblower’s book, Careless People, that I quote in this post: https://ar.al/2025/03/21/careless-people/)
And none of this is going to change if we continue with the framing of “data protection”. We must make this whole business model illegal.
We must go beyond GDPR to GDMR: General Data Minimisation Regulation.
* https://www.surveillancewatch.io/entities/capgemini
** https://dpforum.se/nordic-privacy-arena/nordic-privacy-arena-2026/#CPDP2026 #CPDP #NordicPrivacyArena #dataProtection #privacyWashing #institutionalCorruption #revolvingDoors #usefulIdiots #privacy #humanRights #GDPR #GDMR
-
When you hear that someone is a “privacy professional”, you know two things about them:
1. That they work in the field of privacy
2. That someone pays them to do thatSo ask:
Who is paying you?
(Always follow the money.)
Based on the answer, you’ll know whether their job is to protect your privacy or to find ways of legitimising their employer’s business model that’s predicated on violating your privacy.
Also, ask yourself: who has the most money?
Then you’ll know who can afford to hire the largest number of “privacy professionals.” Hint: trillion-dollar corporations are called trillion-dollar corporations for a reason.
(Wait a minute, am I really saying that most “privacy professionals” are hired to help corporations violate your privacy, not protect it? That’s a yes.)
Finally, have a little read up on “revolving doors” to understand that for some of these “privacy professionals”, a job is just a job and they will happily flip between the two because, really, it’s all just a game to some people when you have a certain level of privilege.
I was once censured by the Nordic Privacy Arena – a conference that “aims to be part of the privacy professional’s journey” where I was presenting a keynote – for criticising the keynote by a Facebook employee (a lawyer who was a “privacy professional”). What was that Facebook employee’s previous job, you ask? Oh, he worked at the French data protection office (CNIL). And that, kids, is what we call a revolving door.
(Last year, Nordic Privacy Arena had four speakers from Google as well as a speaker from Capgemini – whose US subsidiary has a contract to provide surveillance and tracking services to ICE* – and Salesforce**. Not to mention a representative from the Irish Data Protection Commission. You know, the folks who enforce GDPR to the extent that they’re sued by @noybeu to do so. If you don’t know how corrupt Ireland is on this, read the excerpt from the Facebook whistleblower’s book, Careless People, that I quote in this post: https://ar.al/2025/03/21/careless-people/)
And none of this is going to change if we continue with the framing of “data protection”. We must make this whole business model illegal.
We must go beyond GDPR to GDMR: General Data Minimisation Regulation.
* https://www.surveillancewatch.io/entities/capgemini
** https://dpforum.se/nordic-privacy-arena/nordic-privacy-arena-2026/#CPDP2026 #CPDP #NordicPrivacyArena #dataProtection #privacyWashing #institutionalCorruption #revolvingDoors #usefulIdiots #privacy #humanRights #GDPR #GDMR
-
When you hear that someone is a “privacy professional”, you know two things about them:
1. That they work in the field of privacy
2. That someone pays them to do thatSo ask:
Who is paying you?
(Always follow the money.)
Based on the answer, you’ll know whether their job is to protect your privacy or to find ways of legitimising their employer’s business model that’s predicated on violating your privacy.
Also, ask yourself: who has the most money?
Then you’ll know who can afford to hire the largest number of “privacy professionals.” Hint: trillion-dollar corporations are called trillion-dollar corporations for a reason.
(Wait a minute, am I really saying that most “privacy professionals” are hired to help corporations violate your privacy, not protect it? That’s a yes.)
Finally, have a little read up on “revolving doors” to understand that for some of these “privacy professionals”, a job is just a job and they will happily flip between the two because, really, it’s all just a game to some people when you have a certain level of privilege.
I was once censured by the Nordic Privacy Arena – a conference that “aims to be part of the privacy professional’s journey” where I was presenting a keynote – for criticising the keynote by a Facebook employee (a lawyer who was a “privacy professional”). What was that Facebook employee’s previous job, you ask? Oh, he worked at the French data protection office (CNIL). And that, kids, is what we call a revolving door.
(Last year, Nordic Privacy Arena had four speakers from Google as well as a speaker from Capgemini – whose US subsidiary has a contract to provide surveillance and tracking services to ICE* – and Salesforce**. Not to mention a representative from the Irish Data Protection Commission. You know, the folks who enforce GDPR to the extent that they’re sued by @noybeu to do so. If you don’t know how corrupt Ireland is on this, read the excerpt from the Facebook whistleblower’s book, Careless People, that I quote in this post: https://ar.al/2025/03/21/careless-people/)
And none of this is going to change if we continue with the framing of “data protection”. We must make this whole business model illegal.
We must go beyond GDPR to GDMR: General Data Minimisation Regulation.
* https://www.surveillancewatch.io/entities/capgemini
** https://dpforum.se/nordic-privacy-arena/nordic-privacy-arena-2026/#CPDP2026 #CPDP #NordicPrivacyArena #dataProtection #privacyWashing #institutionalCorruption #revolvingDoors #usefulIdiots #privacy #humanRights #GDPR #GDMR
-
When you hear that someone is a “privacy professional”, you know two things about them:
1. That they work in the field of privacy
2. That someone pays them to do thatSo ask:
Who is paying you?
(Always follow the money.)
Based on the answer, you’ll know whether their job is to protect your privacy or to find ways of legitimising their employer’s business model that’s predicated on violating your privacy.
Also, ask yourself: who has the most money?
Then you’ll know who can afford to hire the largest number of “privacy professionals.” Hint: trillion-dollar corporations are called trillion-dollar corporations for a reason.
(Wait a minute, am I really saying that most “privacy professionals” are hired to help corporations violate your privacy, not protect it? That’s a yes.)
Finally, have a little read up on “revolving doors” to understand that for some of these “privacy professionals”, a job is just a job and they will happily flip between the two because, really, it’s all just a game to some people when you have a certain level of privilege.
I was once censured by the Nordic Privacy Arena – a conference that “aims to be part of the privacy professional’s journey” where I was presenting a keynote – for criticising the keynote by a Facebook employee (a lawyer who was a “privacy professional”). What was that Facebook employee’s previous job, you ask? Oh, he worked at the French data protection office (CNIL). And that, kids, is what we call a revolving door.
(Last year, Nordic Privacy Arena had four speakers from Google as well as a speaker from Capgemini – whose US subsidiary has a contract to provide surveillance and tracking services to ICE* – and Salesforce**. Not to mention a representative from the Irish Data Protection Commission. You know, the folks who enforce GDPR to the extent that they’re sued by @noybeu to do so. If you don’t know how corrupt Ireland is on this, read the excerpt from the Facebook whistleblower’s book, Careless People, that I quote in this post: https://ar.al/2025/03/21/careless-people/)
And none of this is going to change if we continue with the framing of “data protection”. We must make this whole business model illegal.
We must go beyond GDPR to GDMR: General Data Minimisation Regulation.
* https://www.surveillancewatch.io/entities/capgemini
** https://dpforum.se/nordic-privacy-arena/nordic-privacy-arena-2026/#CPDP2026 #CPDP #NordicPrivacyArena #dataProtection #privacyWashing #institutionalCorruption #revolvingDoors #usefulIdiots #privacy #humanRights #GDPR #GDMR
-
@Linza I’ve got the start of a bill here if anyone at @EUCommission wants to table it (I won’t hold my breath, shall I?)
-
@Linza I’ve got the start of a bill here if anyone at @EUCommission wants to table it (I won’t hold my breath, shall I?)
-
@Linza I’ve got the start of a bill here if anyone at @EUCommission wants to table it (I won’t hold my breath, shall I?)
-
@Linza I’ve got the start of a bill here if anyone at @EUCommission wants to table it (I won’t hold my breath, shall I?)
-
@Linza I’ve got the start of a bill here if anyone at @EUCommission wants to table it (I won’t hold my breath, shall I?)
-
Ah, algorithmic transparency, what I told the European Parliament was the next step they should take after GDPR. Better six years late than never. Hey, maybe in another decade they’ll even consider implementing a General Data Minimisation Regulation (GDMR).
https://ar.al/2019/11/29/the-future-of-internet-regulation-at-the-european-parliament/
#regulation #EU #GDPR #GDMR #algorithmicTransparency #dataMinimisation https://mamot.fr/@davduf/113845060326024724
-
Ah, algorithmic transparency, what I told the European Parliament was the next step they should take after GDPR. Better six years late than never. Hey, maybe in another decade they’ll even consider implementing a General Data Minimisation Regulation (GDMR).
https://ar.al/2019/11/29/the-future-of-internet-regulation-at-the-european-parliament/
#regulation #EU #GDPR #GDMR #algorithmicTransparency #dataMinimisation https://mamot.fr/@davduf/113845060326024724
-
Ah, algorithmic transparency, what I told the European Parliament was the next step they should take after GDPR. Better six years late than never. Hey, maybe in another decade they’ll even consider implementing a General Data Minimisation Regulation (GDMR).
https://ar.al/2019/11/29/the-future-of-internet-regulation-at-the-european-parliament/
#regulation #EU #GDPR #GDMR #algorithmicTransparency #dataMinimisation https://mamot.fr/@davduf/113845060326024724
-
Ah, algorithmic transparency, what I told the European Parliament was the next step they should take after GDPR. Better six years late than never. Hey, maybe in another decade they’ll even consider implementing a General Data Minimisation Regulation (GDMR).
https://ar.al/2019/11/29/the-future-of-internet-regulation-at-the-european-parliament/
#regulation #EU #GDPR #GDMR #algorithmicTransparency #dataMinimisation https://mamot.fr/@davduf/113845060326024724
-
Ah, algorithmic transparency, what I told the European Parliament was the next step they should take after GDPR. Better six years late than never. Hey, maybe in another decade they’ll even consider implementing a General Data Minimisation Regulation (GDMR).
https://ar.al/2019/11/29/the-future-of-internet-regulation-at-the-european-parliament/
#regulation #EU #GDPR #GDMR #algorithmicTransparency #dataMinimisation https://mamot.fr/@davduf/113845060326024724
-
@baldur “I have become increasingly convinced the best legal solution is one which creates a framework limiting the scope of data collection, restricting it to only that which is necessary to perform user-selected tasks, and preventing mass retention of bulk data.”
Almost like we need a General Data Minimisation Regulation or something… 🤔
As presented at the EU parliament:
https://ar.al/2019/11/29/the-future-of-internet-regulation-at-the-european-parliament/
-
@malteengeler This.
Also see:
The Future of Internet Regulation at the European Parliament: https://ar.al/2019/11/29/the-future-of-internet-regulation-at-the-european-parliament/
Small Tech as the (non-colonial) alternative to Big Tech: https://small-tech.org/about/#small-technology
-
“Data protection” is a joke and you’re the punchline.
“Data protection” assumes that data is collected to begin with and that that’s just “how things are.” It makes no attempt to change that.
What you’re looking for is data minimisation.