cross-posted from: https://feddit.ch/post/91950
Meta is one of the biggest privacy offenders, not suprising that they already seem to break EU privacy law.
Some section sof the article:
Upcoming data privacy regulations are preventing Meta’s new microblogging app “Threads” from launching in European Union (EU) markets. Experts say this is only the beginning of the privacy battle facing te Twitter clone.
Judging by its entry in the Apple app store, it’s no wonder that Threads is being shielded from EU scrutiny. Browsing history, geolocations, health and financial information, and much more are all up for grabs. There’s even a dedicated category for “sensitive information” which, according to Apple’s documentation, includes “racial or ethnic data, sexual orientation, pregnancy or childbirth information, disability, religious or philosophical beliefs, trade union membership, political opinion, genetic information, or biometric data.”
I find some of the information in the article a little bit misleading when it comes to the GDPR. First, the US is considered an unsafe country into which transferring data, because of reasons such as the Cloud Act. The GDPR simply prescribes that data sharing is possible withing countries that offer guarantees similar to the ones offered by the GDPR. If US doesn’t want to offer guarantees of data protection, I don’t understand why the limitation should be perceived on the regulator side.
Second, each platform has in any case multiple instances deployed, often each instance is also distributed across regions etc. Painting this as an “engineering nightmare” seems debatable.
I am also not aware of any prescription that forced anybody to run everything in the US with a US company (which therefore is subject to the cloud act). If the companies make these choices, to me it seems natural that they should also take responsibility for them, not complain that known regulations that exist for years forbid you to do stuff…