News for hackers. Stuff that matters.
Re:Every Mac comes with an (undocumented) family member clas... by eastbound on Saturday November 07, 2026 @07:03AM (#50403804)
It's on the person's Mac so it is a little more complicated. The person you send your data to is the Data Controller, and fails you by not publishing their privacy policy. But Apple isn't a Sub-Processor here, because they aren't sending the data to Apple.

I'm saying that because I wish the GDPR also covered the software providers who perform Data Processing against the will of all parties, but it isn't the case. Lastly, they're a person and not a business.

It is however clear that building a database of people which may contain race, religion or political opinions is illegal, even if it's just a person doing it.

Re:Every Mac comes with an (undocumented) family member clas... by DSpinellis on Saturday November 07, 2026 @12:28PM (#50406306)
GDPR applies to persons and businesses. The fact that you're violating GDPR, because without your knowledge Apple has deployed software on your computer that compiles this knowledge graph makes Apple complicit. Imagine violating a speed limit, because your car's speed indicator has a software flaw that causes it to show a lower speed.
Re:Every Mac comes with an (undocumented) family member clas... by saagarjha on Sunday November 08, 2026 @12:15AM (#50410595)
This is not equivalent at all. You don’t need to create a GDPR notice because the user types their personal info into their own documents for example, despite you being on the path of it going to disk.