Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This assumes you have only US citizen's data. One Canadian in there for example and you're surely breaking the law.


I don't see why. Could you shed light on this view?


It's illegal to sell user data without explicit consent in a lot of countries. It should also be illegal in the US tho due to the Fair Information Practices.


What is defined as explicit consent? Most terms of service and EULAs on websites and software do explicitly give the company the right to sell your data.

Also aren't the FTC's Fair Information Practices just recommendations with no consequences for violating?


Probably "We are going to disclose your data to party X. Do you consent this?". Saying that you are going to share user information with undisclosed 3rd parties seems like a bit too broad.


Here is how it works in France:

http://www.cnil.fr/english/data-protection/rights-and-obliga...

Practically, if you operate a service in France, you need to have 2 checkboxes at user creation:

* I accept to receive commercial informations and advertising from the service

* I accept to receive commercial informations and advertising from third parties

If you don't have the checkboxes or the user unchecked, no sharing.


In the UK, even if you've managed to buy emails it's of no use, you aren't allowed to contact people unless you've had a business relationship for a related product in the last 12 months.


This is new to me. How does this exactly work? Can you report the email senders to someone, if you get spam or something?


You have to sue them yourself, in small claims court.

http://www.legislation.gov.uk/uksi/2003/2426/regulation/22/m...

http://www.legislation.gov.uk/uksi/2003/2426/regulation/30/m...

Judges range in how they feel about these complaints, generally you won't be able to claim just for the time they've wasted, you'll have to justify why you have suffered damages. Extreme cases are different, if they're truly wasting huge amounts of your time, but the occasional email is unlikely to be enough for wasted time.

Alternatively, you can get the ICO to tell them off even if you haven't suffered any damages, but that's not always easy…


Don't confuse facts with views.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: