Remix.run Logo
trashb 11 hours ago

Not surprised this is LinkedIn.

Great that someone is taking action! It seems more often then not the GDPR is not taken serious and is violated without repercussions. This is a great case because the data ends up public facing. Sadly a lot of violations of the GDPR are difficult to discover or check.

ozlikethewizard 9 hours ago | parent [-]

Not entirely convinced who viewed your profile falls under your personal information

Source: used to handle DSAR requests for one of the big 4 banks, we'd redact all names that weren't the requestors, even names on a joint account they'd obviously know

Potential argument under GDPR you could request LinkedIn to not share who's profiles you are viewing, but thats a separate issue

trashb 4 hours ago | parent [-]

Actually the GDPR definition of personal data is very wide, a bit to wide in my opinion (one of the reasons GDPR is not always taken serious) but that is a different topic.

IANAL but the way I read it is that any data that can be linked with you as a natural person could be considered personal data.

Therefore if LinkedIn is saving a log in a database similar to: "profile x viewed person y" and profile y has your name that would qualify as personal data in my view.

https://gdpr.eu/eu-gdpr-personal-data/

Especially interesting is the section "Personal data and the purpose for processing" since LinkedIn is selling access to the data of who viewed your profile the perspective of if it is or is not personal data may be shifted.