Privacy

32120 readers

396 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

449

Google agrees to destroy browsing data collected in Incognito mode (www.theverge.com)

submitted 7 months ago by Charger8232@lemmy.ml to c/privacy@lemmy.ml

36 comments fedilink hide all child comments

Not sure which news website I should be using for the link, sorry! I'm happy to change it if anyone has a better one.

Google agreed to destroy or de-identify billions of records of web browsing data collected when users were in its private browsing “Incognito mode,” according to a proposed class action settlement filed Monday.

The proposal is valued at $5 billion, according to Monday’s court filing, calculated by determining the value of data Google has stored and would be forced to destroy and the data it would be prevented from collecting. Google would need to address data collected in private browsing mode in December 2023 and earlier. Any data that is not outright deleted must be de-identified.

you are viewing a single comment's thread
view the rest of the comments

[–] oce@jlai.lu 15 points 7 months ago* (last edited 7 months ago) (1 children)

I think in European law, for data to be anonymous, not only there should be no personal identifying information but also there should be no identifiers that allow to link non personal data together to trace the behavior of a single person. https://www.edps.europa.eu/system/files/2021-04/21-04-27_aepd-edps_anonymisation_en_5.pdf

[–] NaibofTabr@infosec.pub 15 points 7 months ago* (last edited 7 months ago) (1 children)

When the data is aggragated there's no true anonymization:

https://techcrunch.com/2019/07/24/researchers-spotlight-the-lie-of-anonymous-data

https://www.fastcompany.com/90278465/sorry-your-data-can-still-be-identified-even-its-anonymized

[–] oce@jlai.lu 4 points 7 months ago (1 children)

Do you mean not aggregated? Do you mean aggregating different kinds of data, or do you mean grouping together the same data for a category?

[–] NaibofTabr@infosec.pub 0 points 7 months ago (1 children)

I mean that when lots of data is compiled, you can remove specific identifiers such as names, emails, IP addresses, phone numbers, etc (anonymization) but it's been demonstrated that it's relatively easy to re-identify specific individuals from "anonymized" data.

[–] oce@jlai.lu 3 points 7 months ago

I think this means you still have some identifier that allows to link those data to a single person. This is quite explicitly not considered anonymization by the gdpr.