News for hackers. Stuff that matters.

A comment on The personal info of what could be Instacart customers is being sold online. Parent comment

Re:The personal info of what could be Instacart customers is... by richrichardsson on Thursday July 23, 2020 @06:30AM (#23925887)
> I'm not sure that's a violation of GDPR.

I think the initial communication is obviously not the fault of the company, but as soon as they are aware and refuse to put right the situation, I think they are very much at fault.

[ Parent | on HN ]
Re:The personal info of what could be Instacart customers is... by icu on Thursday July 23, 2020 @09:48AM (#23927320)
Exactly, honest mistakes can, and do, happen. The cause should be investigated and if minor, logged on a register; if serious, it must be reported to the regulator.
[ Parent | on HN ]
Re:The personal info of what could be Instacart customers is... by richrichardsson on Thursday July 23, 2020 @04:03PM (#23931657)
The initial email was pretty bad, I immediately deleted it and contacted them, but it included:

- Full name

- Date of Birth

- Some kind of National ID number

- Bank account details

- Address

If I was of a lesser moral character I'm sure I could have been very naughty with that information.

[ Parent | on HN ]