Slashdot Mirror


Twitter is Being Investigated Over Data Collection In Its Link-Shortening System (theblogroom.com)

New submitter DavidDoherty writes: The Ireland Data Protection Commission is investigating Twitter because the company refused to provide their t.co (URL shortening service owned and used by Twitter) web link tracking data to UK professor, Michael Veale. "Their refusal to comply with the request is potentially a violation of the EU's allowance for requests under GDPR. The privacy expert said that Twitter refused to cite an exception to GDPR for requests that required 'disproportionate effort.'" By contrast, Veale believed that twitter was distorting the law in order to limit the information they handed over to the authorities. A new GDPR regulation, which was first enforced in May, requires that tech companies aim towards a more transparent relationship with user data and provide their customers with data privacy rights.

23 of 60 comments (clear)

  1. Quod licet Iovi, non licet bovi by NuclearCat · · Score: 3, Interesting

    Or older phrase: "Aliis si licet, tibi non licet"
    What small players will be mercilessly punished for, the big ones will call “disproportionate effort” and will be forgiven.

    1. Re:Quod licet Iovi, non licet bovi by JaredOfEuropa · · Score: 2

      Small players will not be "mercilessly punished"... nor will they be excused because they claim they do not have the means to comply. Now that the hysterics has died down, turns out the the requirements of the GDPR are really not that onerous. In most cases you won't even have to pay some clever middleman to manage GDPR-related issues for you. So big firms most certainly will not be let off the hook that easily.

      Also, quidquid latine dictum sit altum videtur.

      --
      If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
    2. Re:Quod licet Iovi, non licet bovi by Anonymous Coward · · Score: 1

      Now that the hysterics has died down, turns out the the requirements of the GDPR are really not that onerous.

      It varies by company and job function for how they've chosen to met the compliance. I work with a lot of customer data on a daily basis. Myself and my colleagues have specialized tools and a variety of scripts on my machine to analyze said data. Due to GDPR my company decided all such data analysis must now be done on remote systems. The remote systems are standardized rollouts and do not have nearly the level of sophistication oujr local analysis machine does. Also, we can no longer attempt to recreate issues reported by customer using customer data on a lab environment. Net result: 25% or so decrease in efficiency for myself and my team.

      Note: I do not disagree with the decision my company made to safeguard the data on remote systems. As usual, the vision of what needs to be done and the execution is where the disconnect happens. "All data must be safeguarded on remote systems" followed by "We didn't have time or funding to do this proper, be thankful you have a remote system to work with at all". Oh, right, we aren't getting any extra people hired to help with the differential in workload due to GDPR. As noted, "it varies" to what degree if affects individual companies and job functions.
       
      Back to the discussion at hand - Twitter needs to do a better job handling these requests. You never say "no", you get Legal involved ASAP and note "thanks for your request, we'll get back to you".

  2. link shortening breaks the internet by goombah99 · · Score: 2

    the links rot.

    --
    Some drink at the fountain of knowledge. Others just gargle.
    1. Re:link shortening breaks the internet by AmiMoJo · · Score: 2

      On the other hand it could fix the internet by automatically detecting dead links and re-routing them to archive.org, the same way that Wikipedia does.

      The real danger is that the link shortening service itself goes away, making all the shortened links 404 with no easy way to recover them.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  3. Re:GDPR applies how? by Zontar+The+Mindless · · Score: 5, Informative

    Let me spell it out for you.

    Veale: All links in tweets get shortened to t.co URLs. When I click on one of these shortened URLs, what information are you obtaining from that? In particular, are you getting my device ID/location and if so, what are you doing with them?

    Twitter: It's... uh... complicated. Sorry.

    Data Protection Commission: That's not an answer to a legitimate question of general interest to anyone using your service. Since you don't care to provide a straight answer, we are going to obtain one ourselves.

    Less confused now?

    --
    Il n'y a pas de Planet B.
  4. Re:Duh by Zontar+The+Mindless · · Score: 3, Informative

    And that excuses not telling your users how they're paying for the "free" service exactly how?

    --
    Il n'y a pas de Planet B.
  5. Re:GDPR pretty much kicks your ass and f*cks your by hcs_$reboot · · Score: 1

    It doesn't. But at least GDPR meets the need to have e-business really care about users privacy thanks to the deterrent effect of strong laws.

    --
    Slashdot, fix the reply notifications... You won't get away with it...
  6. Re:Ireland? Are they relevant? by Zontar+The+Mindless · · Score: 1, Informative

    Did you even bother to find out exactly what Veale was asking for, and why, before you wrote all that?

    --
    Il n'y a pas de Planet B.
  7. Re:GDPR pretty much kicks your ass and f*cks your by Anonymous Coward · · Score: 2, Interesting

    Why don't you just stop using products and services from American companies if you don't like them so much rather than try and force your shit down everybody else's throat who lives in the EU or businesses operating from elsewhere? My company left Europe not because we wanted to but because of the increasingly asinine legal situation. The GDPR wasn't the issue so much as the number of different laws we couldn't reasonably comply without bankrupting the company. The GDPR was just the last straw that broke the camels back. We're not a mega international operation. We're a small family owned and operated business with less than a million in sales a year. Most of what you have done is force smaller companies out of Europe and made it harder to get niche products in that aren't otherwise available in Europe. It's creating trade barriers and putting Europeans at a severe disadvantage for a variety of reasons and products/services. Before we used to ship goods from the UK to the rest of Europe via a third party service largely because mainland Europe is such a socialist shit hole that they can't permit free market competition and hinder goods shipped from outside the EU from getting in without paying exhortant shipping fees via private carriers making us seem insanely expensive when we're actually cheaper (because where we are in the US we don't have as many shitty laws which increase the cost of doing business). While products cost twice as much in Europe they were at least competitive with what Europeans were expecting to pay. Now we ship from the US and because we have no competition in the niche market we service Europeans are FORCED to pay insane amounts for products that they can't get locally any more.

    Europe isn't the only place that is seeing increased poverty through socialism. In the United States the prices are going up because of a recent supreme court ruling. Previously companies didn't have to collect sales taxes for states that they did not operate in. This might seem unreasonable until you understand the insanity of what this means. It's not like the EU's system where you collect a tax based on where you ship from and its pretty much always the same rate. In the US there are 10s of thousands of taxing jurisdictions and there is no way to correlate the tax rate, product (tax rate varies depending on product, dates, uses, etc), and end-user address. Even major corporations have failed where they only have one state to worry about due to the insanely complicated sales tax legislation. This is even in simpler states like NJ where a business has a fixed location and doesn't have to worry about a customers location that largely but not always have the same rate for most products and services and significantly less to worry about (given that they have one tax jurisdiction to worry about). But anyway- this is forcing prices upward. My company now charges an admin fee on top of a states general sales tax rate to account for the manual labor which will be required when we have to attempt to comply with each taxing jurisdiction that a customer orders from. We won't be able to collect the correct tax and won't even know if we have to collect a tax until the end of the year as it'll depend on the sales for that year and we won't know that until the end of the year! Christ- and there isn't any logical thing to do because you can't collect tax that isn't due so we have to collect a fee instead of a tax because we can't refund someone one tax not forwarded because the system isn't cable of handling that. Credit cards can only be refunded for 180 days or so.

  8. Re:GDPR applies how? by Okind · · Score: 2, Informative

    I'd rather pay $50 for an item if that's 3% of my monthly net income, than $25 for an item if that means it's 5% of my monthly net income. I simply don't care for the actual prices of items. I only care for their prices in relation to my net income.

    Because I'm not rich, living in a "socialist" country like the Netherlands is actually beneficial for me. Not because prices are lower (they're not), but because prices are lower relative to my net income. Oh, and because healthcare is significantly cheaper here than in the US. My health is more important than more money.

  9. Block URL Shorteners by Anonymous Coward · · Score: 1

    I blocked all URL shorteners at the DNS layer. I don't get the appeal of these services which by their very nature hide the actual destination of a link you are about to click. I don't understand what problem they are solving for consumers. If your URL is insanely long, then present it to the user in an anchor tag and make the text displayed to the user whatever you want. That is the entire basis of the world wide web.

    Blocking shorteners does cause me the occasional minor inconvenience of having to use a URL unshortening service like unshorten.it, but it is rare and not that big of a deal

    1. Re:Block URL Shorteners by cascadingstylesheet · · Score: 1

      Blocking shorteners does cause me the occasional minor inconvenience of having to use a URL unshortening service like unshorten.it, but it is rare and not that big of a deal

      An "unshortening" service that then ... keeps your data in Fort Knox?

      (sorry, couldn't resist)

    2. Re:Block URL Shorteners by Falos · · Score: 2

      I'll pull up a parser site when I absolutely have to, but I feel like this is the sort of functionality that could be boiled into a browser mod. Something that asks a parser service where the shortener will try to resolve to, and neatly present the next URL in, say, a hover tooltip.

      It could break if the shorteners ever mix things up or nest the bounces, but if the mod is being maintained then they easily have the whack-a-mole advantage.

      I didn't find any when I looked, but I hope I'm just incompetent and you guys know some.

    3. Re:Block URL Shorteners by Obfuscant · · Score: 1

      I don't understand what problem they are solving for consumers.

      It solves the problem that some people assume that the only place you will ever encounter a link is on a web page.

      There are these things called "magazines", and "billboards", and TV and radio ads, and even "letters", that can provide URLs to things. This causes people to want to type in a URL, and a shortener can make the URL easier to remember and mostly easier to type in.

      If your URL is insanely long, then present it to the user in an anchor tag ...

      An example of the problem I referred to.

  10. Re:GDPR applies how? by mmphs · · Score: 2

    I was not really fond of GDPR when I have first heard about it, and sure I do not know it very well, but I already see positive effects. Multiple companies had to actually contact me and inform about their policies regarding my data. Companies that I did not really remember doing any business with, and for sure would not know what they know about me. An eye opener. I actually consider if I have to create an account, and what data do I have to share before doing any buisness. Even my employer had to change its internal policies and scrap some data/copied documents it had on me. I have started to appreciate being a European a bit more.

  11. Re:GDPR applies how? by Zontar+The+Mindless · · Score: 1

    I live in Stockholm. In my suburb we have a high school, a junior high, an elementary school, and about 6 daycare centres (3 of those within sight of my apartment). Parents who don't like those choices are free to move themselves and their kids to a different suburb, or even to a different city, just like they are in the US.

    BTW, I attended public schools growing up in the US, and my family was not "impoverished", nor were most of the families of the other 5,000 or so kids who attended the public schools in our town.

    Any other nonsense you'd care to share?

    --
    Il n'y a pas de Planet B.
  12. Re:Duh by Anonymous Coward · · Score: 1

    Children want to know where their bacon comes from, until they do.

  13. Re:GDPR applies how? by Zontar+The+Mindless · · Score: 1

    1. Nobody has modded your comment, up or down, so far. You posted AC, which means you started at 0, and so your post remains at 0 now.

    2. If the thread looks "retarded", well, you started it, didn't you?

    3. I couldn't downmod your comment even if I wanted to; you cannot moderate and post in the same discussion.

    4. If you can't see how the issue might affect Veale *personally*, then perhaps your quest for signs of retardation should include the mirror.

    5. Why are you so quick to defend against something I never said?

    Looks to me like you identify really strongly with Twitter for some reason, and that you've a bit of a persecution complex as well. What's up with all that?

    --
    Il n'y a pas de Planet B.
  14. Re:Duh by Zontar+The+Mindless · · Score: 1

    "Gesetze sind wie Würste, man sollte besser nicht dabei sein, wenn sie gemacht werden"?

    --
    Il n'y a pas de Planet B.
  15. Re: GDPR pretty much kicks your ass and f*cks your by houghi · · Score: 1

    There are plenty if companies that comply with GDPR and not have an issue. As long as you do not share data, you are already thete for 95%.
    Taxes in Europe are a lot easier than the US. A LOT easier. If GDPR was an issue, the taxes should be enough to leave the US.

    Do not forget that the laws in Europe are made for the people, by the people.

    --
    Don't fight for your country, if your country does not fight for you.
  16. Re: GDPR applies how? by houghi · · Score: 1

    So you mean wealth us mot just comparing income? Mind blown.

    Well, not really. I so not care that much how much taxes I pay. I care if I have enough wealth. And to me wealth is the ability to buy stuff and have time to enjoy life.

    If that means paying 50% taxes, I am happy.

    --
    Don't fight for your country, if your country does not fight for you.
  17. Re: GDPR pretty much kicks your ass and f*cks your by OYAHHH · · Score: 1

    Do not forget that the laws in Europe are made for the people, by the people.

    That's rich, so rich....

    --
    Caution: Contents under pressure