News for hackers. Stuff that matters.

A comment on “GDPR compliant” analytics is probably violating GDPR.

Re:“GDPR compliant” analytics is probably violating GDPR by mcny on Wednesday May 10, 2023 @12:04PM (#35889347)
What I don't understand is how come nobody talks about Microsoft Clarity? I don't know anything about GDPR but I would think if anything violates GDPR, it would be a literal screen recording app that tracks your mouse movements and can show literally where you put your mouse and your moves on the screen.

And yet:

> Clarity is GDPR-compliant as a data controller. For more information, see the Microsoft Privacy Statement.

https://learn.microsoft.com/en-us/clarity/faq

Is this true?

[ Parent | on HN ]
Re:“GDPR compliant” analytics is probably violating GDPR by brianoconnor on Wednesday May 10, 2023 @12:15PM (#35889500)
If you use clarity (you are the controller, ms the processor) you are responsible for obtaining the necessary consent from your users. That consent should make it clear to the user what behavioral data is collected. (Commonly referred to as cookie banner).
[ Parent | on HN ]
Re:“GDPR compliant” analytics is probably violating GDPR by legitster on Wednesday May 10, 2023 @12:11PM (#35889438)
See also CrazyEgg, or HotJar.

Although I am not sure why these would violate GDPR. Customer usage data is specifically exempt if it's anonymized.

[ Parent | on HN ]