←back to thread

160 points skilled | 1 comments | | HN request time: 0.198s | source
Show context
senko ◴[] No.45331497[source]
> The company says it will rely on “legitimate interests” as its legal basis and will offer an opt-out so members can refuse use of their data for training

"Legitimate interest" is a very specific term in context of GDPR. Not a lawyer, but have been looking into it previously, and I doubt "we want to feed data to our AI so we can make more money" passes the Legitimate Interest Assesment (LIA) test.

Here's an example of a test that must pass (sorry, docx, but way better than a random explainer): https://ico.org.uk/media2/for-organisations/forms/2258435/gd...

replies(2): >>45331640 #>>45331905 #
1. mhitza ◴[] No.45331905[source]
The GDPR is about personal data though. And content your produce is not by nature personal data "in abstract".

That content could contain personal data (such as when including it in your post), but that's an exception rather than a norm. And if we'd be following exceptions, even crawling websites could be illegal under the GDPR.