Hacker News Reader

Comment by asdfasgasdgasdg | Hacker News Reader

I don't think one can request that even in theory. If the data is not personally identifiable, then it is not owned by you (at least in my understanding of gdpr and similar privacy regulations). "yabadadoes (or their IP) visited the site" is your data. "someone from yabadabadoes country visited the site" is not your data and it's not up to you to say what the site owner does with that information.

View on HN

A user has clientids and/or userids and Google seems to be capable of connecting these back to learn things about users and sites. So what exactly is personally identifiable is a secret..

As I see it Google has fallen into the false position that things they agree not to do based on user settings is the same as not collecting and storing the data necessary to do them. I don't think regulators will see this Google's way.

If the analytics records aren't associated with those IDs, and can't be reidentified due to protections like k-anonymity, I don't think it's relevant that Google has other records that are subject to gdpr, and are handled differently.

Google asks visitors to agree to personal data collection the first time they visit Google Search: https://i.imgur.com/jRl3ui0.png

Some of this data collection can be turned off, though it appears not for all data categories across all Google services. Visitors are not offered a clear way to access, export, or even delete all personal data collected on them by Google.

The way several Google services are collecting personal data is in breach of GDPR.

https://gdpr-info.eu/chapter-3/

Reply on news.ycombinator.com