477

Meta not complying with GDPR (sh.itjust.works)

submitted 1 year ago by steersman2484@sh.itjust.works to c/privacy@lemmy.ml

37 comments fedilink hide all child comments

Last week I received an email from Meta Plattforms Inc about their new ToS and Privacy Policy addressed to my first Name.

But I don't have any accounts on any services from Meta Platforms (I deleted them a few years ago). Therefore I contacted the DPO and requested a copy of my personal data and asked them to delete it according to GDPR.

They told me that there is no account associated to my email, I should provide my account details to the account in question, which I don't have. They are unable to help me with the data I provided and I should contact the irish or my local data protection authority and bring my claims before court.

So they obviously have at least my first name and my email address and refuse to comply with GDPR.

Has anyone had any simmilar experiences or any recommendations on my further actions?

I don't have the time and money to sue Meta, but I will contact my local data protection authority.

you are viewing a single comment's thread
view the rest of the comments

[-] CameronDev@programming.dev 17 points 1 year ago

Are you sure it wasn't a phishing email? With stolen creds?

[-] steersman2484@sh.itjust.works 22 points 1 year ago

This was the sender email: notification@email.meta.com

And all links point to meta.com, so no phishing

[-] envis10n@lemm.ee 13 points 1 year ago

Check the email headers. You can spoof a sender address

[-] steersman2484@sh.itjust.works 9 points 1 year ago

I know, already done. Looks fine

[-] envis10n@lemm.ee 9 points 1 year ago

All good, just wanted to make sure since it wasn't clear

[-] steersman2484@sh.itjust.works 9 points 1 year ago

Thank you anyways for the hint

[-] 520@kbin.social 7 points 1 year ago* (last edited 1 year ago)

Spoofing a sender while falsifying compliance with SP~~DI~~F and DKIM are another matter entirely.

OP, do you know if your email host performs these checks? (The popular webmail services do)

[-] dot20@lemmy.world 9 points 1 year ago

S/PDIF (Sony/Philips Digital InterFace) is an audio interface, perhaps you meant to refer to SPF (the Sender Policy Framework)?

[-] 520@kbin.social 6 points 1 year ago

Ahh yes, you are correct, I got mixed up!

[-] dot20@lemmy.world 1 points 1 year ago

[-] steersman2484@sh.itjust.works 3 points 1 year ago

It is a gmail address

[-] 520@kbin.social 2 points 1 year ago

Then you are probably fine unless you're a high value target. Gmail checks these, and any such bypass would not be burned on a common target.

this post was submitted on 24 Aug 2023

477 points (98.6% liked)

Privacy

31866 readers

381 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS