Alexander Hanff

Privacy Advocate

Public Key

npub1ezdftuy6ts8wcmk3r6ufyg9m0jq6pasgtdj9wmn4a6xgxzctr2lqk7tw2h

NIP-05 Address

thatprivacyguy_at_eupolicy.social@mostr.pub

Profile Code

nprofile1qqsv3x547zd9crhvdmg3awyjyzaheqdq7cy9kezhde67aryrpv9340slx96ah

Author Public Key

npub1ezdftuy6ts8wcmk3r6ufyg9m0jq6pasgtdj9wmn4a6xgxzctr2lqk7tw2h

Show more details

Last Notes

2024-09-20 12:44:05

Oooo new iPhone 16 Pro Max just arrived :)

2024-08-20 08:12:18

- reply

@npub1l4l…vsmn I created an issue on the git

2024-08-19 09:36:40

So I finally got around to launching https://gdpr.help for smaller organisations needing ad hoc help with the #privacy compliance questions.

2024-06-20 11:16:44

- reply

@npub1a38…ujj0 haha no, just that we continue to fight, even if it is behind closed doors sometimes :)

2024-06-20 11:03:11

- reply

@npub1a38…ujj0 I am speaking on this at Europol's Conference in September.

2024-06-20 10:33:04

- reply

@npub1a38…ujj0 indeed - as far as it goes we know the Hungarian Presidency has an appetite for pushing this proposal - so we get a short respite but work must continue.

2024-02-12 08:27:15

This is why you should never add your phone number to a social media or other online account:
https://www.linkedin.com/posts/alexanderhanff_privacy-illegal-trespass-activity-7162706598010863617-oFV-
#privacy #security

2024-01-29 08:35:58

In what can only be seen as Alphabet's blatant refusal to obey EU law, it was announced over the weekend that they would introduce Bard to Android Messages App and intercept all messages (past and future) for the purpose of training it - in breach of EU's rules on interception of communications under Article 5(1) of Directive 2002/58/EC.
To make it worse Alphabet know this is illegal after they were caught intercepting WiFi communications in 2010 with their Streetview cars.
#privacy

2024-01-24 20:42:30

People ask me why I say Patreon are evil and why I refuse to support people via Patreon...
This is why...
https://arstechnica.com/tech-policy/2024/01/patreon-attacks-law-that-keeps-platforms-from-sharing-your-video-views/
#privacy #law #pixels #surveillance #ethics #surveillancecapitalism #evilscheissters

2024-01-20 13:14:24

This is very interesting because I had a chat with the Irish DPC last week about my complaints against Meta and Youtube in relation to "Pay or OK" and unlawful detection of adblockers.
Irish DPC informed me that they were waiting on their own action until the #EDPB had concluded their ongoing investigation.
Today Meta removes the paywall on Facebook - which, would seem to indicate that there is an incoming enforcement action from the EDPB - I see no other reason why Meta would back down.

2024-01-13 12:55:38

- reply

@npub15r6…dd9a probably a bad idea to use this given that so many sites still unlawfully enabling the non-existent legal basis of Legitimate Interest under their TCF banners. Rejecting consent on these banners does not unset the LI toggles.

2024-01-04 10:42:27

Why are airlines permitted to get away with this shit? Booked two bonus flights to SFO this summer using points and a voucher to get free Business Class tickets.
Problem is you cannot use them for returns only one way so I have to book return flights - the price - 3300 Euros *each*
However, there is currently a campaign which allows me to book 2 economy outgoing with 2 premium economy returns for a total of 2000 Euros (return for both people).
(more)

2023-12-05 14:16:19

Does anyone know how to stop Wordpress automatically setting ETags for every single page? This is a big issue from a privacy compliance perspective and seems to now be the Wordpress default.

2023-11-13 10:18:55

Copy of my complaint to the DPA against Meta's paywall - feel free to use it as a template:
https://www.reddit.com/r/privacy/comments/17u7n40/copy_of_my_complaint_to_the_swedish_supervisory/
#privacy

2023-11-10 14:04:48

Criminal complaint against Google Ireland ltd. now also filed.

2023-11-10 12:17:47

- reply

cc @npub12ac…3xqe I will be filing a similar criminal complaint against YouTube in Ireland this afternoon for illegal deployment of surveillance technology to my devices under Section 2 and illegal interception of data within an information system for the purpose of surveillance under Section 5

2023-11-10 11:11:26

I just filed a criminal complaint against Meta Platforms Ireland Ltd. under Section 2 and Section 5 of the Criminal Justice (Offences Relating to Information Systems) Act 2017 for:
"illegally deploying surveillance technology to my computers for the purpose of monitoring my behaviour, as they had no reasonable excuse or lawful authority to do so."
and
"illegally intercepting transmission of data within an information system (my computing devices) for the purpose of monitoring my behaviour."

2023-11-01 09:43:23

- reply

The basis of the Norwegian DPA's position comes from Article 7 and Recital's 42 & 43 of the GDPR which sets the requirements for consent and what constitutes freely given consent.
Recital 43 states that consent will not be considered as freely given if it is a condition of access to a service where the processing of personal data is not necessary for the provision of that service.

2023-11-01 09:38:38

EDPB sends binding instruction to Irish DPC to ban Meta's processing of personal data for behavioural advertising permanently across the EU/EEA.
According to a press release by the Norwegian DPA, the ban will include Facebook and Instagram and prevents Meta from using the legal bases of 6(1)(b) (Contract) or 6(1)(f) (Legitimate Interest) under GDPR and must instead obtain consent.
Norwegian DPA also states that Meta's plans to introduce paid subscription would be illegal.

2023-10-21 11:25:05

Lot's of people asking me why I filed a complaint against #YouTube for their illegal deployment of #spyware to detect #adblockers instead of simply paying for YouTube Premium.
The answer is simple - YouTube Premium has no ads but Google still use it to profile you for advertising on their other products.
I refuse to pay for *any* service which doesn't respect my fundamental rights.
And so should everyone else, because until they do, Alphabet will continue with their illegal #surveillance.

2023-10-20 12:52:27

To all the people crying about "Why shouldn't YouTube be allowed to make money from ads!"
If I print a newspaper entirely funded through advertising revenue - and you pick up a free copy, do you think it is ok for me to break in to your house to make sure you are looking at the ads?
Because that is what YouTube are doing when they deploy their spyware to detect #adblockers
#privacy is a #fundamentalright - fight for it or lose it.

2023-10-20 12:31:08

- reply

@npub1jtm…rxtn you are incorrect - the html file with the javascript embedded (or separate javascript file) are stored on the end users terminal equipment and yes you are legally obligated to obtain consent before doing this.
You also need a further consent for running the script (the javascript) once it is deployed to the device because at that point the script is accessing information in the terminal equipment (both require consent under EU law).
I charge for commercial advice...

2023-10-19 14:40:49

- reply

@npub15zu…s7lx @npub12d7…f7q4 as a registered lobbyist I fully support and have signed this petition.

2023-10-19 10:10:32

- reply

You can help by filing your own complaint here:
https://forms.dataprotection.ie/contact
The more complaints the DPC receives - the quicker they will act.
You can use my complaint to help write your own (attached).
#privacy #surveillancecapitalism #advertising #cookies #consent #law
https://eupolicy.social/system/media_attachments/files/111/261/137/614/795/975/original/49498ffc36daada8.png

2023-10-19 10:08:45

Today I filed a formal complaint against #YouTube with the Irish Data Protection Commissioner for their illegal deployment of #adblock detection technologies.
Under Article 5(3) of 2002/58/EC YouTube are legally obligated to obtain consent before storing or accessing information already stored on an end user's terminal equipment unless it is strictly necessary for the provisions of the requested service.
In 2016 the EU Commission confirmed in writing that adblock detection requires consent.

2023-10-12 10:34:10

Gotta love it when a douchebag tracking company publishes a white paper explicitly illustrating all of the ways they are breaking EU law in relation to ePrivacy and GDPR - talk about giving gifts!
AWIN will be the subject of my next legal complaint :)
You couldn't make this stuff up!
https://www.awin.com/gb/compliance-and-regulations/gdpr-eprivacy-whitepaper
(Don't worry I have a copy saved in case they take it down).
#privacy #surveillancecapitalism #surveillance #law #gdpr #eprivacy #compliance #tracking #cookies #lawfulness #principles