Does this not violate European privacy laws?

Probably yes it does. Not that it matters when you hack a website to have some expensive jewelry sent to your home address.

	▲	4 hours ago \| parent [-]
		[deleted]

weberer 4 hours ago | parent | prev | next [-]

So what if it does? They'll get hit with a fine that will be the equivalent of 6 hours of revenue as they continue to be bastards.

Kipters 4 hours ago | parent | prev [-]

GDPR only covers PII, this is a randomly generated ID that changes on every install on the OS.

You can mix it with other info to track a user, but it's not enough to de-anonymize someone on its own.

tjoff 4 hours ago | parent | next [-]

If they associate it with a Microsoft account (or anything that is identifiable) then it becomes PII.

And of course they are.

totaa 4 hours ago | parent | prev [-]

unfortunately under GDPR, anonymous IDs are personal data as they are used to single out a data subject.

	▲	account42 2 hours ago \| parent [-]
		unfortunately???