The administrative penalties, which are worth around $335 million at current exchange rates, have been issued by Ireland’s Data Protection Commission (DPC) under the European Union’s General Data Protection Regulation (GDPR). The regulator found a raft of breaches, including beaches to the lawfulness, fairness and transparency of its data processing in this area.

The GDPR requires that uses of people’s information have a proper legal basis. In this case, the justifications LinkedIn had relied upon to run its tracking ads business were found to be invalid. It also did not properly inform users about its uses of their information, per the DPC’s decision.

LinkedIn had sought to claim (variously) “consent”-, “legitimate interests”- and “contractual necessity”-based legal bases for processing people’s information — when obtained directly and/or from third parties — to track and profile its users for behavioral advertising. However, the DPC found none were valid. LinkedIn also failed to comply with the GDPR principles of transparency and fairness.

  • COASTER1921@lemmy.ml
    link
    fedilink
    English
    arrow-up
    27
    ·
    5 hours ago

    LinkedIn has some of the most obfuscated and complex ad targeting settings I’ve encountered. There needs to be a retirement to have a one click solution to disable ad personalization.

      • COASTER1921@lemmy.ml
        link
        fedilink
        English
        arrow-up
        3
        ·
        4 hours ago

        I thought that without blocking cookies the tracking is still active, even if you’re not being served ads from them. In those same LinkedIn privacy settings you’re automatically opted into having your data used to train AI models.

  • slowcakes@programming.dev
    link
    fedilink
    English
    arrow-up
    17
    ·
    5 hours ago

    I always wonder, how you can be fined hundreds of millions of dollars for breaking a law or multiple, but no one will go to prison. How is it not a serious crime to break peoples right to privacy and personal integrity on a massive scale like that.

    If no one is jailed for doing it, it will never stopped they will just try to lobby to change the laws. They knowingly are breaking the law, but it’s only fines so they don’t give a shit, because they are also lobbying to change those laws…

    What a bunch of idiots for politicians, they let these corporation walk all over our rights.

    • NaibofTabr@infosec.pub
      link
      fedilink
      English
      arrow-up
      9
      ·
      edit-2
      4 hours ago

      I always feel like the solution is to make this sort of thing unprofitable. Rather than just having a cost-of-doing-business fine, the company should have to forfeit all revenue generated by the illegal activity. The fine should then be assessed in addition to the revenue forfeiture, making it a real penalty rather than a wrist-slap.

      Businesses operate on cost-benefit analyses and risk assessments. If violating the privacy regulation risks the loss of all revenue for the ad business, they won’t do it.

      • slowcakes@programming.dev
        link
        fedilink
        English
        arrow-up
        6
        ·
        4 hours ago

        Sure but when they actively decide to break the law and the rights of millions people, they are criminals or part of a criminal Enterprise and you should be on trail. The people in position of power, choose to break the law because of profit motivation, of course they shouldn’t keep the money because it was made illegally.

        Why would they care about the consequences of fines, when they themselves don’t have to pay it, they can just cash out and not lose a cent, its the company that gets fined.

        Fuck em, they should face several years of prison and lose the right to run a business or having a position of power, for gross violations of human rights and shouldn’t be trusted to hold power.

        What stops Nvidia, intel or whatever to build the same kind of privacy violating technology directly in the hardware. I don’t even know how our phones are even allowed to collect all the data that they do, what are you going to do in the future when every piece of electronics you buy, is collecting data. You wouldn’t even need internet, they’ll just send it to the nearest 5g tower.

        In 5 - 10 years, we’ll live in the era of mass surveillance (for your safety of course). AI combined with all the data available, will make the world a living hell for regular people. 1984 will no longer be science fiction, because we elect self serving clowns, total morons that aren’t capable of doing anything because they are starstruck by rich people and tech bros.

        • NaibofTabr@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          ·
          53 minutes ago

          Why would they care about the consequences of fines, when they themselves don’t have to pay it, they can just cash out and not lose a cent, its the company that gets fined.

          Because if you lose a company a substantial amount of money without generating profit for the shareholders then you won’t get an executive position at any other companies.

          In 5 - 10 years, we’ll live in the era of mass surveillance

          It definitely feels like that. In a lot of ways we’re already there. Stingrays have been around for more than a decade - but of course they’re technically legal.

          Technology will always move faster than government, and unfortunately that means technology companies will always find ways to gather data on people with things that we don’t have laws for. The only way I can think to slow that down would be to kill the demand for tracking data, but it seems like every government and major business is into collecting, buying and selling data on human behavior right now so I don’t even have a theory as to how to actually reduce the demand for it. It’s way out of hand.

          The best option for individuals right now is to live in a place that has some decent legal restrictions, like the EU or California, and of course vote for politicians who favor privacy regulations.

      • kambusha@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 hours ago

        Just jail the CEO. Maybe their salary will finally be justified, if they’re willing to take the risk.

        • NaibofTabr@infosec.pub
          link
          fedilink
          English
          arrow-up
          4
          ·
          4 hours ago

          Thing is, if the profit is high enough and the golden parachute is good enough then a business could probably find someone to take the fall as the CEO for them. Losing the CEO won’t end the business or their exploitative behavior.

          • kambusha@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 hours ago

            Tbh, you’re probably right. It’s the same reason that solar finally is seeing an uptick, and how cryptography works. Solar makes financial sense now, and cryptography is all just about how much money you would need to spend to crack a password.

            • NaibofTabr@infosec.pub
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              49 minutes ago

              This is really it. Businesses are about making money. If you want to change the way businesses behave, you have to change the financial incentives. You can condemn the capitalist greed motivation if you want, but that really only amounts to moralistic posturing, it doesn’t accomplish anything practical. It’s more useful to understand how businesses make decisions, and then adjust rules to incentivize the behavior you want and disincentivize the behavior you don’t want.

              An ounce of prevention is worth a pound of cure.

          • P1nkman@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            3 hours ago

            Board of Directors. Entire C-suite on trial. People with 10% or more ownership of shares. That would change things.

            Oh, emails were deleted and couldn’t be recovered? CTO is at fault. Skip start, go straight to jail.

            • NaibofTabr@infosec.pub
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              1 hour ago

              Well… look, I’m all for punishing white collar crime, we should do more of that, but I’d much rather incentivize preventing this kind of thing in the first place than punishing people after the fact.

              Taking away the revenue (remember revenue means all the income, not just the profit) from criminal behavior does that, because it means the business risks financial collapse.

              For instance, in this case if LinkedIn’s EU ad sales department violated EU law, then all revenue from the EU ad sales department should be forfeit, for the entire time period during which the violation occurred.

              This would be a lot more effective than threatening rich people with jail time, because rich people can always make a deal to serve their time in a nice facility or house arrest or something. Instead, we threaten to wipe out the business financially.

  • mannycalavera@feddit.uk
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 hours ago

    Ireland taketh with one hand… and give back (and then some) with another BEPS tax dodging scheme.