Thanks for the mention, Mike (I'm the original author of the posts linked to above).
A further point: we analyzed about 20 privacy policies of MPs and found many are relying on the "public interest" basis to process user data (the ICO refers to it as "public task").
Public interest is one of six lawful bases under the GDPR (the one most are familiar with is user consent i.e. the basis many private organizations have to rely on) and its clarified further in The Data Protection Act 2018 to include "processing of personal data that is necessary for...an activity that supports or promotes democratic engagement."
In other words, many lawmakers appear to be relying on the justification that collecting data on their users "promotes democratic engagement." Some don't appear to separate the bases for processing data dependent on task either, i.e. everything falls under "public task."
We'll publish a more in-depth post about it later this week.
Cheers,
Jason
Techdirt has not posted any stories submitted by JasonS.
(untitled comment)
A further point: we analyzed about 20 privacy policies of MPs and found many are relying on the "public interest" basis to process user data (the ICO refers to it as "public task").
Public interest is one of six lawful bases under the GDPR (the one most are familiar with is user consent i.e. the basis many private organizations have to rely on) and its clarified further in The Data Protection Act 2018 to include "processing of personal data that is necessary for...an activity that supports or promotes democratic engagement."
In other words, many lawmakers appear to be relying on the justification that collecting data on their users "promotes democratic engagement." Some don't appear to separate the bases for processing data dependent on task either, i.e. everything falls under "public task."
We'll publish a more in-depth post about it later this week.
Cheers,
Jason
Techdirt has not posted any stories submitted by JasonS.
Submit a story now.