▲ | KomoD 12 hours ago | |||||||
> In this case, they have anonymous stats that they share with others and that, in some jurisdictions, could fall under 'selling user data' Correction, they said personal data, which if you go by the EU's definition means "any information that relates to an identified or identifiable living individual". Which wouldn't be "anonymous stats", and can you give an example of a jurisdiction where sharing "anonymous stats" would go under selling personal data? And is "doesn't sell your data to advertisers" also too broad? Because they removed that part too. | ||||||||
▲ | SAI_Peregrinus 9 hours ago | parent | next [-] | |||||||
There are many cases where "anonymous" data can be de-anonymized, mostly if the stats contain outliers or multiple small groups that can be combined to uniquely identify an individual. "Any information that relates to an identified or identifiable living individual" (emphasis mine) implies that if there exists a way to de-anonymize any individual in the dataset then the dataset is PII. | ||||||||
▲ | rovr138 12 hours ago | parent | prev [-] | |||||||
> which if you go by the EU's definition Why go by EU's definition when it's used globally? If it was a single location, or a single law like GDPR, that'd be easy to reword. From the page they launched, https://www.mozilla.org/en-US/privacy/faq/ > It seems like every company on the web is buying and selling my data. You’re probably no different. > Mozilla doesn’t sell data about you (in the way that most people think about “selling data“), and we don’t buy data about you. Since we strive for transparency, and the LEGAL definition of “sale of data“ is extremely broad in some places, we’ve had to step back from making the definitive statements you know and love. We still put a lot of work into making sure that the data that we share with our partners (which we need to do to make Firefox commercially viable) is stripped of any identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like OHTTP). Specifically, > Since we strive for transparency, and the LEGAL definition of “sale of data“ is extremely broad in some places, we’ve had to step back from making the definitive statements you know and love. If you consider GDPR, even the suggestions on the new tab could send data to third parties and wouldn't be okay with this. Any request done to a third party server, would send them your IP which is PII under GDPR. | ||||||||
|