News for hackers. Stuff that matters.

A comment on Stripe records user movements on its customers' websites. Parent comment

Re:Stripe records user movements on its customers' websites by darknoon on Tuesday April 21, 2020 @01:59PM (#22937518)
As an end user, can you provide me with all of the event data you have collected about me? Or does Stripe help sites that integrate stripe.js to respond to data requests?

Ie, CCPA / GDPR says I have the right to see and correct it if I live in one of those jurisdictions.

[ Parent | on HN ]
Re:Stripe records user movements on its customers' websites by lrpublic on Tuesday April 21, 2020 @02:58PM (#22938175)
You could send a subject access request to [email protected] - it would be interesting to see how they respond if you share the unique identifier mentioned in the article.
[ Parent | on HN ]
Re:Stripe records user movements on its customers' websites by lmkg on Tuesday April 21, 2020 @02:47PM (#22938062)
CCPA has a Right to Access like GDPR does, but it does not have a Right to Rectification.

Under both laws, if Stripe claims to be a Processor/Service Provider, then they have an obligation to facilitate sites using Stripe to respond to access requests. But they have no obligation to process those requests themselves. I think CCPA requires they direct you to the actual Controller, but that's one aspect of CCPA that has changed since December.

[ Parent | on HN ]