News for hackers. Stuff that matters.

A comment on 250M Microsoft customer service and support records exposed on the web. Parent comment

Re:250M Microsoft customer service and support records expos... by jchb on Wednesday January 22, 2020 @07:29PM (#22123611)
Under the GDPR, that Microsoft Data Protection Officer will have 30 days to respond to you. If they don't respond, you can complain to the supervisory authority (in the case of UK that is https://ico.org.uk/make-a-complaint/).

Now, Microsoft does not necessarily have to tell you exactly what of your data was leaked. They probably do not know! In this case, they may just respond to your request with all of the personal data they hold.

The law just says that they have to notify you of the "nature of the personal data breach as well as recommendations for the natural person concerned to mitigate potential adverse effects".

[ Parent | on HN ]
Re:250M Microsoft customer service and support records expos... by pbhjpbhj on Thursday January 23, 2020 @05:02AM (#22126261)
Do you think the ICO will do anything? Usually their answer seems to be "well we told the company about your case, and they said they wouldn't do it again, so everything is fine now; you're welcome!".
[ Parent | on HN ]