Scott Murray Feb 25

Hey #California — you already know about CalPrivacy’s new Delete Request and Opt-out Platform (DROP) that will scrub your info from data brokers’ lists starting Aug. 1.

https://privacy.ca.gov/drop/

When submitting your request, some info is optional. For example, in addition to name, email, DOB… you can provide vehicle VINs and smartphone/TV tracking IDs.

It's all optional, but the more you provide, the more thorough the scrubbing! 🧼

HOWEVER, I was concerned: What if I provided ALL of this info, and then an unscrupulous data broker (hahaha, they are all unscrupulous) actually used all that info to link me to my devices and vehicles, when they had not yet previously.

#Privacy nightmare, right??

1/

Show threadScott Murray 

So I asked #CalPrivacy if my various identifiers are sent bundled together (which could enable linking them) or somehow disaggregated.

Good news! Their GREAT response:

***

CalPrivacy collects the minimal amount of information from consumers and, currently, the data is "debundled" and divided into 6 separate lists: email addresses, phone numbers, MAIDs, ConnectedTV IDs, VIN + Name, and (name, date of birth, zipcode).

Data brokers must select the list(s) that will make the most matches within their data bases. For example, some data brokers may only need the email address list, while others may need MAIDS and (name, date of birth zipcode). When data brokers pull the hashed list(s) of identifiers from DROP, each identifier is pulled separately. Therefore, they will not be able to link identifiers to other personal information that you submit to DROP.

Data brokers are legally obligated to only use the information provided by CalPrivacy to effectuate a deletion request and no other purpose.

***

🤓🎉 🏆

Feb 25 at 4:34amWeb
Show threadRyan @ Ansible Games & CDFFeb 25
@scott great to know. Thank you
Show threadSteve FeltenFeb 25
@scott A speeding truck is ‘legally obligated’ to stop when I’m in a crosswalk, but I’m not going to step out in front of it.
Show threadsgt1372Feb 25

@scott

Yeah, I'm skeptical too. I want to believe it'll work but I don't trust that it will do so. 🤷🏻‍♂️

Show threadScott Murray Feb 25

@sgt1372 👍 I cautiously trust CalPrivacy to do this right; I don’t trust the data brokers (obviously), which is why I was glad to see their response address my concerns.

But yeah it will require some leaps of faith… 🤞