News for hackers. Stuff that matters.
Re:Tim Hortons app violated laws in collection of ‘vast amou... by amluto on Wednesday June 01, 2022 @05:35PM (#31588455)
I think the best way is to attack the market from all sides.

- GDPR-like legislation to try to prevent the inappropriate collection of this information.

- Ban the sale of or trafficking in illegally collected personal information. Apply serious monetary penalties to anyone who sells such information improperly. Additionally, anyone who sells such information and subsequently learns that it was improperly collected or was GDPR-deleted must tell their buyers, who must then delete it.

- Buyers are liable if sellers are found to have violated the rules and don’t pay. They are also liable if they fail to honor delete requests. Buyers who consider this liability unacceptable may attempt to purchase or require insurance.

Re:Tim Hortons app violated laws in collection of ‘vast amou... by jonhohle on Wednesday June 01, 2022 @05:51PM (#31588601)
> Ban the sale of or trafficking in illegally collected personal information.

In the US isn’t the sale of illegally acquired data already illegal under 18 U.S. Code § 2315?

I wonder if any existing stalking laws would cover existing data collection practices. Most people are upset when they learn there are records of their location down to a meter or so wherever they go that are sold to anyone who wants it. Does that meet the bar of “emotional distress”?