I keep hoping this is gonna be the case, but the years roll on, I'm still clicking some stupid consent-popup on every single website I ever visit, and in the meantime TV manufacturers continuously spy on their users, sell their user-data, and push unwanted ads into their interface and even in programs being watched, and apparently no-one (apart from a few of us on HN) seems to care.
Soon it will violate the warranty not to plug it into the network. Probably for “security” or to protect the children.
https://noyb.eu/en/our-detailed-concept
>noyb uses best practices from consumer rights groups, privacy activists, hackers, and legal tech initiatives and merges them into a stable European enforcement platform. Together with the many enforcement possibilities under the European data protection regulation (GDPR), noyb is able to submit privacy cases in a much more effective way than before. Additionally, noyb follows the idea of targeted and strategic litigation in order to strengthen your right to privacy. We will also make use of PR and media initiatives to emphasize and ensure your right to privacy without having to go before court. Ultimately, noyb is designed to join forces with existing organizations, resources and structures to maximize the impact of GDPR, while avoiding parallel structures.
So I would assume that this is mostly an issue in non-GDPR regions (or they're doing some really ugly legal shenanigans to ignore the denied consent?).
https://www.gdpreu.org/the-regulation/key-concepts/legitimat...
> Legitimate interests is most appropriate as a lawful basis where companies use personal data in a way that individuals can reasonably expect. If it impacts individuals, it can still apply if the controller company can justify there is a compelling reason for the impact the processing will have.
> Companies can rely on legitimate interests for marketing purposes if they can prove that the data usage is proportionate and fair to the user. It must have a minimal impact on the user in privacy terms and be for a reason that people would not be surprised at.
Sadly I would reasonably expect Samsung to sell the data and I would not be surprised by it.
Naturally this is a process most people do not feel like going through, and as such most companies continue flying under the radar :)
Most people don't use their TV to look at that kind of thing anyways.
>They are just feeding image through an alogrithm [sic]
You don't know that.
>Saving it would incur legal problems like copyright
That's not how copyright works.
>and have storage costs
Negligible.
>Most people don't use their TV to look at that kind of thing anyways.
Irrelevant.
> Data ceases to be personal when it is made anonymous, and an individual is no longer identifiable. But for data to be truly anonymized, the anonymization must be irreversible.
Examples of PII:
A cookie ID. Internet Protocol (IP) address Location data (for example, the location data from a mobile phone). The advertising identifier of your phone.
A tvid is personally identifiable.
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...
> (30) Natural persons may be associated with *online identifiers provided by their devices*, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags. This may leave traces which, in particular when combined with unique identifiers and other information received by the servers, may be used to create profiles of the natural persons and identify them.
Device Identifiers explicitly covered as a definition of GDPR. Further, IPs are also shared if you are behind an ipv4 gateway and these are also covered.