This is not ok - Lemmy

Saw this today and now I’m reconsidering if Boost is right for me. I’m really hoping this is shitty boiler plate that was accidentally copied and over looked because that is some bullshit to say “unless we decide we want to use your personal data for whatever we want”. I know “legitimate interest” is a phrase from the cookies law but there is no legitimate interest justification for this. My data is my data and advertisers can fuck off, as can Boost if this the direction it’s going.

legitimate interest is a shitty data privacy loophole

Hi could you give me your name, address, social security number, browser history, sickness history, political affiliation, sexual orientation, pay grade please 🥺

I have a legitimate interest! It’s identity theft

TIL that some people have identity theft as a hobby
You never just buy a yacht for yourself in someone else’s name as a gift for yourself to reward yourself for finally learning that new skill?
I only subscribe to porn sites. As a hobby, of course
It’s a clause within GDPR which is usually misinterpreted and sometimes (as is most probably the case here) abused.
What does ‘grounds of legitimate interest’ mean?

Grounds of legitimate interest is a legal ground for processing data, but conditions have to be met under EU law.

European Commission

Ok, that is informative. Without that specific context, that message is utterly empty and useless.

Of course, it still feels weird, that “legitimate interest” seems a subjective term and maybe they could have found some better phrasing to reflect this sentiment…

From the dev has said, it sounds like it’s Google’s language, not his. So he probably doesn’t have any control over the phrasing.

Right, I was thinking not the developer, not the ad network, but all the way back to the wording of GDPR.

In fact, it feels like an ad network cannot have a “legitimate interest” in personal information of someone who opts out. If they count targeted advertising without consent as “legitimate interest”, seems like GPDR is significantly less useful.

Well the “loophole” exists for a reason.

For example my company requires the position and some identifier of people to do what people use our system for (tracking logistics units, and there is an option to do that via a mobile app for smallest clients not owning dedicated hardware). That’s what legitimate interest is about. Or well, is supposed to be about. Some data processing is the point of some applications, and hence they would naturally not be usable without processing that personal data.

True, should have clarified - it’s something that is abused and treated as a loophole by shitty companies.
wouldnt that fall under “essential cookies/data” or something like that? which is usually presented separately from “legitimate interest” in these forms and rightfully cant be turned off