Wednesday, September 29, 2010

Privacy Laws that Yatedo is breaking

DIRECTIVE 95/46/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
Excerpt from this law:
PRINCIPLES RELATING TO DATA QUALITY
Article 6
1. Member States shall provide that personal data must be:
(a) processed fairly and lawfully;
(b) collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes. Further processing of data for historical, statistical or scientific purposes shall not be considered as incompatible provided that Member States provide appropriate safeguards;
(c) adequate, relevant and not excessive in relation to the purposes for which they are collected and/or further processed;
(d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that data which are inaccurate or incomplete, having regard to the purposes for which they were collected or for which they are further processed, are erased or rectified;
(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data were collected or for which they are further processed. (...)

What Yatedo is doing: collecting information for not explicit purposes and also not legitimate (as they use it for their own gain). The data is excessive, not adequate or relevant. The data is not accurate and it is not updated correctly. It renders all the information public without even checking if it is really pertinent to the person.

Some other sections that Yatedo is not respecting:
SECTION IV - INFORMATION TO BE GIVEN TO THE DATA SUBJECT - Article 10
SECTION V - THE DATA SUBJECT'S RIGHT OF ACCESS TO DATA - Article 12
SECTION VII - THE DATA SUBJECT'S RIGHT TO OBJECT - Article 14

No comments:

Post a Comment