We regret to have to inform you that we will be shutting down our public Matrix server. Check out our forum post to find out what to do if you have an account, why we are shutting down and how the timeline on this will be. tosdr.community/t/matrix-tos… #matrix #tosdr

"You consented to that data collection" I push back against the myth of consent in a world where companies deliberately try to obfuscate how much data they're collecting, and wrap it in 60 pages of legalize and vague language.

Le programme de financement européen NGI est en danger. Cette initiative permet de soutenir financièrement des centaines de projets libres communautaires. Cette disparition mettrait en péril tout l’écosystème des logiciels libres qu’il consolide. framablog.org/2024/07/14/lun…

I've just contributed to @ToSDR. Consider supporting them too — every little helps! opencollective.com/tosdr via @opencollect

Just ask our friends at @ToSDR...

Good a time as any to revisit this study from 2008 by @lorrietweet and co that found that it would take 244 hours (or a month, if you spent 10 hours a day reading) to review all the privacy policies you agree to in a given year: kb.osu.edu/server/api/core/b…

After being broken for a while our #Safari Extension is back! And not just that, we now have dedicated apps for #iOS and #MacOS, quickly checking the rating and summary of any Service #TermsOfService and #privacy policy. Get them here: apps.apple.com/us/app/tos-dr…

➡ Free #privacy resource You read the Terms of Service, right? No, of course not! The way companies publish their ToS makes it difficult to parse. How they embed them into user workflows encourages individuals to skip over them. And since there are more of them than you, it becomes an asymmetric problem that you can't properly manage at scale. One tool to help with this imbalance is @ToSDR (tosdr.org/). They distill the legal jargon of various sites' ToS into human-readable outlines to help you make sense of it all. For the most popular sites they even provide ratings. The code is open source. You can submit new sites. There's also communities on IRC and discord. #cybersecurity #learncybersecurity #privacyawareness #termsandconditions #dataprivacy

#Avast sold data collected by a "privacy tool". Let this be a reminder to actually read the terms and not just the marketing! Check out our summary of Avast Terms here: tosdr.org/en/service/2141 Read about Avast selling user data to advertisers at @verge theverge.com/2024/2/22/24080…

Ever been curious about what companies can do with your information or what you're agreeing to when you click I agree? Check out tosdr.org/ They have a wonderful website where you can see exactly what you're agreeing to! #tosdr

Not reading the Terms of Service, how convenient there’s a service for that :)

Thanks so much for the positive feedback over the last few days - I spent months of my life pouring my heart and soul into making the app for each of you. Get excited for future updates and feel free to leave feedback anywhere for us, thank you!!! -EH

To be fair, who has time to read an agreement the size of a textbook? 😐

Happy new year 🎊 ...Soon™️ 👀

🔵 UNPOPULAR OPINION: the GDPR also applies when creating and training AI datasets - and most tech companies ignore it. This must change. Read this: As the @CNIL's infographic below shows, regardless of the data source, data protection law must be observed when creating a training dataset. A reminder that Article 6 of the GDPR establishes that these are the possible ways to process personal data lawfully: - consent - contract - legal obligation - vital interest - public interest - legitimate interested Most AI companies developing large language models today rely on legitimate interest to scrape data from the web and train their models. However, despite seeming an "easy" alternative, legitimate interest has its own legal requisites, including the three-part test (purpose, necessity, balancing), transparency, data minimization, and storage limitation. Most tech companies developing AI today don't comply with any of these (and I did not mention yet data subjects' rights and other data protection principles). With the quick and ubiquitous integration of generative AI and large language models-based capabilities into daily applications, data protection law must be implemented and made effective (or privacy rights and advancements - which took so much effort and time - will be undermined). Privacy matters, ALSO when AI is involved. Join our 4-week Privacy & AI Bootcamp on January 31st and learn more about it.

23andMe just updated their terms of service limiting the time in which users can take legal action and adding a class action waver. If you are a 23andMe user you have 30 days to opt-out. This comes after millions of user data including DNA was leaked. 23andme.com/legal/terms-of-s…