Slashdot Mirror


UK Privacy Watchdog: 'Right To Be Forgotten' On the Web Unworkable

An anonymous reader writes "Want to be invisible to Google? Apparently you can't, at least according to the European Commission and Information Commissioner's Office. '"The right to be forgotten worries us as it makes people expect too much," said [deputy commissioner David Smith]. Instead, Smith said the focus should be on the "right to object" to how personal data is used, as this places the onus on businesses to justify the collection and processing of citizens' data. "It is a reversal of the burden of proof system used in the existing process. It will strengthen the person's position but it won't stop people processing their data." EC data protection supervisor Peter Hustinx added the right to be forgotten is currently unworkable as most countries are divided on what qualifies as sensitive personal data. "I believe the right to be forgotten is an overstatement," said Hustinx."

27 of 134 comments (clear)

  1. The world is really small now. by jellomizer · · Score: 2

    That is the problem. Back in them good old days, You can make a ass out of yourself, and only a few people or perhaps the town know. But after you left the town you had a clean slate.

    Now today with Google and Facebook, are assitry is now shared across the globe and will stay embedded in peoples mines for a long time. Oh wait weren't you the Star Wars Kid, or that Girl who didn't know where Canada was.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    1. Re:The world is really small now. by geekoid · · Score: 4, Insightful

      Bu that information is irrelevant with time and newer pop culture examples.
      If either of those people sat in front of you for an interview would you recognize them?

      Also, people are finely starting to realize that everyone is an ass from time to time so it doesn't really matter.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:The world is really small now. by postbigbang · · Score: 3, Insightful

      And that makes permanent data storage better? So that we don't eventually extort each other into oblivion? It's better to mandate public opt-in data life.

      Everyone is human. Do we need the evidence to drag out decades from now about your indiscretion in Gresham?

      --
      ---- Teach Peace. It's Cheaper Than War.
    3. Re:The world is really small now. by poetmatt · · Score: 3, Insightful

      everything should be opt-in as far as your data is concerned.
      The big question is: why isn't it?

      forget MS, google. Forget every analytics company. This should be across the board, and they should not be able to refuse you access if you don't opt in.

    4. Re:The world is really small now. by mabhatter654 · · Score: 5, Interesting

      "If either of those people sat in front of you for an interview would you recognize them?"

      Google Glasses will. THAT is expressly the point. 10 years from now nobody cares... Except all these services are gathering this stuff SPECIFICALLY to shove it back in your face. "You know, this one time, in band camp.."

      A better example will be when credit reports NEVER EXPIRE. I mean you can get a legal bankruptcy, but all they have to do is leave the report out there on Google for it to pick right back up... It's not a "legal" credit report... But it's not YOUR DATA so they don't care and your potential employer sees it anyway.

      Many fors of discrimination are going to be right back in vogue when employers can pre-filter you through Facebook for religion, sexual orientation, ethnicity... That's basically what these companies are selling..

  2. Right to alternicks by rwa2 · · Score: 4, Insightful

    I'm more worried about the crackdown on using alternate identities online. My friends know who I am, but no one else should be able to pull up dirt on me based on random dirt they find associated with my name.

    At the same time, if there's an actual crime being investigated, it's takes some pretty trivial sleuthing to trace back an alternate id to a person, but takes some effort just out of reach for a telemarketer or employer or griefer, and could require an approval process and leave a paper trail back to the requester.

    So I'm sort of upset that GooTube / Facebook push for realname ids. But for the most part they let you get away with using your alternicks... for now. But that's the right we need to fight to preserve.

  3. unworkable? care to elaborate, corporate world? by wierd_w · · Score: 5, Insightful

    Let's see here. We have the EU defining a legal civil right. The corporate world says "oh noez! We can't do that! Our business model is BASED around violating that civil right! We totally can't just delete all that precious and lucrative data just because some prudes don't want to be included!"

    If we adapt this, and replace some other legally recognized civil right, like say-- the right to the sanctity of one's own body, the absurdity of this attestment becomes painfully clear.

    "Oh noez! We can't do that, our business model is BASED on forcing prepubescent children to perform sexual services without getting any permission of compensation! We can't just let those very lucrative child prostitutes go just because some prudes don't want to take diseased cock all day! We make our money selling child prostitution services! These so called "rights" are completely unworkable! How can we sell reliable prostitution services if we can't force people to be whores for us!?"

    Seriously. That's what I see when I see these kinds of arguments. If your business mode revolves round violating other people's rights, then you DON'T have any right to perform that line of business. The fact that it is "unworkable" is fucking INTENTIONAL.

    1. Re:unworkable? care to elaborate, corporate world? by geekoid · · Score: 5, Informative

      It's impossible to remove everything about you from the internet. Impossible. Google dis one of the best at getting rid of your data, but they can't get rid of my data; which might be about you.

      And so on. No man is an island.

      Strong regulations of what they can do is the best way to protect citizens

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:unworkable? care to elaborate, corporate world? by marnues · · Score: 2

      What civil right do you believe is threatened here? The one where you control Google's data about you? Not a civil right.

    3. Re:unworkable? care to elaborate, corporate world? by Anonymous Coward · · Score: 2, Insightful

      Dear American companies, fuck off elsewhere if you can't honour the laws of the land where you conduct business. Simple really.

    4. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 4, Insightful

      I agree, just like it is illegal for me to set up a camera in your bathroom and then sell the pictures of you in the shower.

      That is basically what the internet is right now, a big public bath house where people can see all the naughty bits.

      There is money to be made by taking pictures and selling them. (That's basically what collecting personal information without permission and selling it as a bulk aggregate is. "Anonymizing" the picture by not affixing a name, and shuffling it in with hundreds of others doesn't stop you from taking the picture and selling it. Making the photography illegal, and enforcing it, makes people who peddle such wares either criminal, or highly regulated and on the up and up. Much like the legitimate porn industry, vs 3rd world sex slave racketeers.)

      The comparison isn't hard. Getting people to feel violated by being the equivalent of an ameture porn star for taking a shower, but because their data was exposed and whored out IS hard.

      These weasly tactics, like saying "it gives people a false impression [of safety]" are just horseshit. Just apply the same rhetoric toward rape, and see the absurdity.

      Its like saing "if you don't want to get raped, don't walk on the sidewalk at night."

    5. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 4, Insightful

      The civil right here, is the right to be forgotten online, meaning, the right to have your previous history expunged, and also the right to not have data collected without permission.

      It's no different from whipping out a camera, photographing people who didn't sign a model release, and then lucratizing the photos in ways the people photoed don't endorse, just because they happened to be outside, or were wearing a certain brand of clothing.

      Just so you know, the above is fucking illegal as hell, and people DO have legal right to demand the destruction of such imagery. (As far as I know, in bot the EU and the US.)

      This is simply an expansion of the same basic premise, that you have a right to privacy, a right to not be exploited against your wishes, etc.

      Proper enfocement would be to fine the fuck out of companies that refuse to comply, and persist in warehousing data.

    6. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 2

      So, your argument, reframed to suit the analogy, is that the child pornographers offer lots of "free" candy and narcotics that people have gotten used to, and without the money flow from selling tight prepubescent ass to perverts, the prices for those products will go up, and people won't be able to afford them.

      Forgive me when I say that very little of real value will be lost.

    7. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 2

      I am well aware of such ToS. I don't subscribe to such services. I don't use twitter, I don't use facebook, I don't use G+, I don't use any such service.

      Yet, because OTHER people post information about me on things like their facebook page, my information gets vacuumed up and sold wholesale, just as if I had signed their ToS.

      Requireing the equivalent of a model release for second and third hand data would put a very effective stop to that shit, and would actually make the data collected more valuable, because after being resold, it would be encumbered with the need to seek releases from all the people involved. This would make unencumbered data much more valuable. It would ctually HELP the industry.

      If I walk into a porno set, and say I want to be in the porno, then I have to take the std test, and sign the release. That's no different from somebody going to Facebook and saying they want to be on the site, and agreeing to the ToS.

      What I object to, is being put in the porno against my wishes, because somebody else supplied the director with footage.

      No release, don't collect the data. It is not fucking hard. Just grep the username list to see if the person's name is associated with an account, if it isn't, don't use the image or data.

    8. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 3, Insightful

      How is it impossible, other than it happens to be a conflict of interest for you?

      Much like people provide records to medical institutions because it is necessary to get quality healthcare, people provide online merchants their address, telephone, and credit card numbers to make purchases and get deliveries. Nowhere in the tranaction is there even so much as a checkbox that says "yes, remember this purchase so you can suggest simular items, and share this purchase experience with other merchants." Instead, the push is to consider this "just a given! Our customers WANT this! Nevermind the sounds of the angry mob outside, that's just your imagination."

      Technologically I don't see how this is hard either. Keeping the data for law enforcement subpoenas for a limited time, and pretending it doesn't exist is a far cry from embedding spybugs in your fucking checkout page so that the "user experience" extends to other site visits as well.

      The latter is like putting a GPS tracking bug on the pricetags at a shopping center, so you know where else the customer shops that day.

      Yet, that is EXACTLY what ad network tracing cookies do, EXACTLY what that bullshit "facebook button" does, etc.

      I don't want that, I don't want the service, I don't want your ads, I don't want to be profiled, just because I casually look at a news link, etc.

      I am not alone, and the EU seems to agree that you shouldn't presume I have agreed by default.

      That this makes your life harder as a dev is just tough shit.

    9. Re:unworkable? care to elaborate, corporate world? by DaHat · · Score: 2

      You must be one of those who thinks that privacy is an absolute that no other person may infringe upon unless you explicitly sign away limited access to you.

      Bad news... you do not live in that world, nor have you ever, if you did you would have been outfitted with a cloaking device at birth and every single fact about you in every persons mind or database would be triggered to a self destruct command that you could selectively kick off.

      If you don't want your information being posted to Facebook by "OTHER people"... then you should probably have a talk with "OTHER people"... the same way you would with your aunt Stella (who is a bit of a blabber) nothing at all (so as to avoid any disclosures at all)... or that you don't appreciate her sharing the information about that rash you had treated last year, you did go to her after all about it... and probably had some suspicion that they had a memory and might repeat it someday.

      What I object to, is being put in the porno against my wishes, because somebody else supplied the director with footage.

      If you'd care to point out a few cases where this has happened... I'm sure some /. readers would enjoy it... but it is still irrelevant.

      If you grant a license to information (your name, phone number, address, hobbies, interests, etc) to ANYONE... you no longer control that data.

      Even before the PC age, nothing stopped a friend from signing you up for a free subscription to "Paranoid for Privacy Monthly", just the same way as nothing prevented a religious group from staking out porn shops or strip clubs and noting the license plates of the people who went in and out.

      You have either implicitly or explicitly released such information through your actions... and now you belly ache that someone saw you at a restaurant making out with a woman who wasn't your wife.

      Waaaaaaaa!

      If you care that much about privacy than it is up to you to protect it.

      In many states... it's perfectly legal to walk down a public sidewalk and use a pair of binoculars to look in the windows of near by homes and businesses. Don't want people doing that? Maybe you should protect what is visible through your open windows.

      In many states... it's perfectly legal to rent a helicopter or airplane and circle the backyard of that girl you like (from a distance so as not to directly be disturbing) who you suspect may be sunbathing in the nude.

      If you expose something to the public, you have only yourself to blame, not those who hear it, not those who repeat it, not those who sell it, and not those who aggregate it.

    10. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 2

      And YOU are making it into a binary argument. "Since you can't effectively control what others do, then you have no say about your data whatsever."

      If this were true, then wirefraud wouldn't be illegal.

      The mere fact that it IS illegal, makes the "ordering 50 pizza's in somebody else's name" reference you just made specious as fuck.

      Likewise, there are laws that at least TRY to restrict the distribution of priviledged data and information against the owners wishes. Or have you had your head up your ass this whole time about the DMCA and berne copyright?

      Perhaps you feel patient-doctor confidentiality is "quaint", and that the laws forbidding doctors revealing all their patient's dirty laundry to "interested parties" don't fucking exist?

      The error you make is ascribing a boolean Yes/No to this situation. The proper data type is double float.

    11. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 2

      (Also just to note: bank and loan services have existed comfortably for centuries without reselling account information. They don't actually NEED that revinue stream, except to sate either their own greed, or someone else's greed. (Like shareholders, etc.))

      Internet search can realistically be funded without adverts, since they can operate like an advert company themselves. The assertion that the service would be prohibitively expensive for ordinary users is unsubstantiated.

      Social networking does not need centralization. FOSS communities have lived and operated just fine on home-operated IRC servers and the like just fine. The issue is handling large volumes of users. But, like many supply/demand problems, this would likewise sort itself out, just like demand has forced migration away from dialup. Moving the demand away from centralized networks and into distributed ones would only change the market, not destroy it.

      (Social networking is also not something I consider to be of much value, other than as a means of communication. I consider it to be a mashup of 1980s pagers and geocities, with an oppressive marketing goul behind the curtain. I would not shed a single tear if facebook closed its doors.)

      Local news likewise has survived for a long time without reselling eyeballs, making the claim insubstantiated.

    12. Re:unworkable? care to elaborate, corporate world? by wierd_w · · Score: 2

      Newsflash assfuck, I DON'T.

      I object to getting the "value added service" of having my browser hijacked by markting morons just because I DARED to click on a news article, or DARED to check a price on something.

      Last I checked, giant swarming eyeballs with a secret RFID implant needle don't come swarming out of the airducts when I pick up a product in a store, turn it over for the price, and make not of it. I don't get assaulted by endless questionaires about why I was looking at the product, and if I buy it often. Etc.

      I hold firm to the assertion that it is like agreeing to be raped, just because you are outside, and the sun is down. (Cause, CLEARLY, you wouldn't go outside at night unless you WANTED forced penetration! Because, like, that's what happens when you do LULZ!)

      Seriousy AC, grow the fuck up.

  4. Re:How hard could it freaking be by DaHat · · Score: 2, Insightful

    All you need is a damn regex for your data and you're done. What BS are they feeding these guys?

    I agree fully <insert your real screen name here>, but have you considered the fact that even if your regex wiped out your post above (assuming you posted it with a real name), that your regex should not modify my reply which very well may contain not just your post... but additional information? Why should your right to be forgotten override my right to speak?

  5. No such right by Intropy · · Score: 5, Insightful

    You do not have a right to be forgotten. Think about what that means. That means you do something and I witness it. Do you have a right to compel me to forget it ever happened? Of course not. My right to be secure in my thoughts, the written expression thereof (which is what they really mean by forget), and my effects is a real right. Your desire for me to forget something you did is not.

    You have a right to privacy. Exercise it by not publishing information you want kept private. You can't put the genie back in the bottle, and short of fraud or some other malfeasance being responsible for the breach of privacy in the first place, you have no right to command that anyone try.

    1. Re:No such right by jma05 · · Score: 2

      > That means you do something and I witness it. Do you have a right to compel me to forget it ever happened? Of course not.

      Yes. But the law is not targeting people, but rather systems. Organizations are not people as are not machines. Asking to be forgotten by such systems is not without precedent. A judge may expunge a juvenile's record on adulthood, for instance. The people who already knew of the juvenile's escapades are not demanded to forget the events, nor are they forbidden from being queried later; just the systems in question. The goal is not to rewrite the past, but to close certain channels of access (usually with known automatic triggers with unfair consequences) to it. All this sounds fair to me.

  6. Re:Your real right by DuckDodgers · · Score: 4, Insightful

    It's beyond Google, Facebook, and Twitter, though. If you use a membership card at a retailer like Costco, a pharmacy, or a grocery store then they know a lot about you. If you use a credit card then the credit card knows a lot about you. Your bank knows a lot about you. Your wireless carrier knows a lot about you, unless you keep the phone at home and don't actually carry it with you - but that defeats the purpose of having a mobile phone. Your internet service provider knows a lot about you. etc... etc... And thanks to things like the Evercookie (which we can assume most of the major advertising networks already had in place before the actual Evercookie was publicized), dozens of web companies know a lot about you. If you use hosted email, that company knows a lot about you.

    In all of those cases a skilled hacker, an unethical employee, or a corrupt goverment agent can get an unsettling amount of information about you. Avoiding it is difficult but plausible for educated, upper middle class or wealthier people - don't use a membership service for your pharmacy and grocery store. Don't have credit cards. Pay cash for your shopping. Use multiple banks, and do most of your transactions using prepaid credit cards and money orders. Switch phone numbers and wireless carriers frequently, or forego a mobile phone entirely. Set up all of your internet devices to use TOR or a VPN service. Host your own email, and only communicate using encrypted messages with other people that likewise host their own email and communicate only via encrypted messages. Avoid all social networks. All of that is a lot of work, and not practical for most of the population - it's so uncommon I wouldn't be surprised if you end up on a government watch list simply for conspicuously protecting your own privacy.

    That said, legislating the problem away is simply unworkable. I don't know what the practical broad solution for privacy is, but simply passing a law demanding that Google, Facebook, Comcast, T-Mobile, Costco, Mastercard, etc... abandon large aspects of their business model is a nice fantasy but it won't fly.

  7. Re:How hard could it freaking be by wierd_w · · Score: 2

    Who says it does?

    If the regex nukes only his own posts, and any quoted portions of his posts, replacing it with "User has exercised his or her right to be forgotten. This post deleted." Over and over again, doe NOT remove "your" side of an argument, on whatever service or forum you post on. Your quotes will just end up looking silly, and you will just end up looking like a douche.

    Nothing would prevent you from keeping your own personal version of the dialog for personal posterity, but your redistributing it after the other party has expressly stated that they do not authorize such, runs foul of not only this civil liberty, but also copyright law, and as such is *already* illegal.

    Personally, I like some (SOME! Not all!) Of the features of this right to be forgotten. But in a lot of cases, a better solution is just to allow users to set privacy restrictions on content they provide, and then actually fucking obey them.

    Contrary to the behavior of many social networking sites, landlords can't randomly decide to sell their rentors' stuff on a whim, nor rifle through their posessions, papers and effects, just because they own the property on which those items are stored.

    Simply enforcing such things, and treating all uploads as being defacto unauthorized for marketing purposes unless explicity flagged and personally endorsed as such would basically remove almost all need for this, other than for getting old forum posts redacted.

    Again, your appeal to freedom of speech about block quotation runs headfirst into current copyright law, since it is written text, and has natural copyright ascribed to its author, and not to you. Your ability to quote and use it is already limited to fair use only. You can make a parody of the post, and that can stay, but any direct quotations that don't fall inside fair use are flat out not authorized, and not protected.

    You can call the person wanting the scrub job done a douche and anything else you want, but your rights end where his begin, and vice versa. If you parody his post, its totally safe, for example.

    Of course, large regular expressions filters would already exclude parodies, since they aren't identical. :D

  8. Re:I'm risking beeing modded as a troll for this.. by mark-t · · Score: 2

    Well, presumably, "not doing stupid shit" entails avoiding doing things that have some reasonable chance of costing you any desirable opportunities in the future... whether or not you necessarily personally think that those things are unwise or not.

    But ultimately, nobody can be perfectly prescient, or make perfect choices all of the time, and it's a exercise in futility to try. If some future possible employer gets offended at what they find out about you after googling your name, that's unfortunate, but that's also life. Sure, we'd all like it if other people could just forgive and forget any of the past crap that we've done, but nobody else actually *owes* us that. The question, as I said, is not what needs to happen so that other people don't remember, or can't be reminded of what you did, as much as it is what you are planning to do with the rest of your life in spite of that having happened... instead of trying to pretend that you shouldn't have to face up to some unforeseen consequences that might arise from your past choices or actions just because they may be unpleasant.

    In the end, assuming you are adult, you are ultimately accountable for yourself. Nobody else is. Make the most of the life you have now, because it's a one-shot deal, and the more time in it that you spend wallowing in regret or wishing that other people wouldn't judge you, the less time is going to be left over for you to really *feel* alive.

  9. EU Double standard by manu0601 · · Score: 2

    Of course when this is about free market and destroying states as economic actors, there is no problem with member states different sensibilities, democracy can be trumped for the good cause. When we come about protecting citizens against megacorporation, it seems to be different.

  10. ICO have always been pro-Stasi by UpnAtom · · Score: 2

    I don't know how MI5 managed it but somehow the Data Protection Commissioner (now the Information Commissioner) was somewhat ambivalent about Stasi-like surveillance. The latter bit was told to me by Phil Booth, ex-national co-ordinator of NO2ID.