741
23andMe frantically changed its terms of service to prevent hacked customers from suing (www.engadget.com)
submitted 2 years ago by to c/technology@lemmy.world
40 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 24 points 2 years ago (1 child)

And this is why I wish we adopted GDPR more... if they are compliant, then they have to remove all data held when requested. Too bad the US will never care that much to respect individuals' data like that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago (1 child)

    Exactly. I made a GDPR request for deletion. They can get in big trouble if they are soft deleting.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Have they ever been audited?

    How does the legal authority work with GDPR if the company's physical and financial operations are entirely within the US? Would the GDPR even be allowed to audit them without their consent?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    No idea if they’ve been audited. GDPR doesn’t require it. My understanding is that American companies doing any business or having any users in the EU need to be GDPR compliant for those users. I don’t think that’s been challenged in any courts yet.

  • permalink
  • fedilink
  • source
  • parent