Re:Google's reCAPTCHA likely illegal in Europe?
by account42 on Friday June 23, 2023 @08:23AM
(#36445863)
Like any US-based service (or one controlled by a US company), reCAPTCHA is subject to US laws which mean they CANNOT guarantee that your PII is only used for fraud detection purposes because the govermnet can order them at any time to hand over that data while also ordering them to keep silent about that.
reCAPTCHA, in this case can be consider as "fraud detection".
Can we do it without PII? Yes. Maybe. With lots of effort and less optimal result.
Does this fit the "necessary" provision of GDPR? This depends on which court you ask.
reCAPTCHA does not add "direct" value to the user, it even cost some harass... but it is a life saver if your service is big spam target.