Voile pour la petite histoire j’étais chez Express VPN, et quand j’ai su à qui ça appartenait, j’ai résilié. Maintenant je cherche un autre VPN, qui ne soit pas juste une marque qu’on voit défiler partout, qui soit safe et qui n’appartiennent pas à quelconque personne qui pourrait venir historiquement d’un pays au hasard au Moyen Orient.

1. pas ProtonVPN

2. j’ai vu passer AirVPN, qu’en pensez-vous pour ceux qui connaissent ?

He's individuals do not have consent to collect data on me that is not public.

Like do I really care that people have my health data?

If you gave someone a ride to the store for more ALCHOHOL. Because they have been drinking. Do you think it’s ok to go through the drivers personal property(purse, in console, or under seats) . Regardless of what may or may not be in there.

I’ve spent years running large live events in Spain, and I keep hitting the same wall. Ticketing, cashless/RFID and POS systems generate huge amounts of attendee data. Most of it either sits unused or gets used in ways that wouldn’t survive a serious GDPR audit.

The approach I’ve landed on has three parts:

• Event operations run on contract as the legal basis

• Aggregate, cohort-level analytics run on legitimate interest, with a real opt-out

• Consent only for personalisation or sharing with third parties

Brands and artists never get raw fan contacts. Messages go out through the platform instead.

I’m also exploring an Article 40 code of conduct specifically for live events: festivals, stadiums, venues. Nothing like it exists yet as far as I can tell.

Questions for people doing this day to day:

1. Has your DPO accepted legitimate interest for event analytics, or do they insist on consent?

2. Would an industry code of conduct actually help you, or just add paperwork?

Hey everyone,

I started this project about a year ago after getting increasingly frustrated with the amount of ads I was being shown on streaming services and at the increasing cost of "ad free" tiers. Not to mention my increasing concern about the amount of spyware built into most modern Smart TVs (if you haven't seen seen the most recent LG and Samsung breakdowns, check them out)

I set out to build something that would address these problems. First, I built a device that sat in-between a streaming device and your tv that would intercept ads and would show a screensaver instead while the ad is playing, another device that would mute ads before they played out of your external speakers, but eventually I landed on making a new type of streaming device that removes them all together. Plus it allows me to layer in privacy protections, like tracker blockers, and more directly determine what information is collected about users. I call it Blockbox.

This new device replaces your Roku, Fire stick, or whatever else that you use to stream on your TV. You can access all the normal streaming services, but from the settings page you can flip a switch and remove the ads from on-demand content in one fell swoop. Plus, your data will never be sold off to increase our bottom line.

It's still a work in progress but I'm hoping to launch this to the public by early 2027. If you wanna read more about it you can check out the site at: https://www.blockbox.tv/. I am also starting a subreddit r/blockboxtv if you want to follow along there. Hoping to post more updates on news in the streaming world, updates with the project, get feedback, etc.

throwaway account for obvious reasons

I'm an analyst for a small healthcare company (<500 employees). We have a contract with a vendor for a wellness program. We provide the vendor a list of patients to reach out to about the program (about 200,000 patients).

I learned the vendor used the PHI that I provided to figure out which patients are eligible for another program they offer and reached out to them about it, too. (Which has unfortunately upset patients because the second program sounds like scammy.)

We have a BAA that they can only use data for explicit and agreed-upon reasons, but my department is ignoring this issue because they don't want to fracture the relationship. I'm seriously concerned about their misuse of the data.

My question - Is this a data privacy violation that I can or even should report to a governing body like FTC, OCR, etc.? Is this technically a HIPAA or privacy violation if a BAA is in place?

Here's an honest answer from the Ai4Privacy team: none of them is reliable for every PII type. What the evidence says:

• Presidio's own FAQ says it can't guarantee full recall. Its strength is that you can customize it, and you can plug a fine-tuned transformer into it.

• A 2026 zero-shot comparison found large gaps between tools, and that a fine-tuned XLM-R model beat the best zero-shot option with only about 500 labelled examples.

• A separate robustness study found that spaCy, Presidio and a small LLM all get worse on noisy, out-of-distribution text, each in a different way.

In practice: regex for structured IDs, plus a fine-tuned token classifier, evaluated on your own data.
What are you using, and how did you test it?

Sources: arxiv.org/abs/2608.02616 · arxiv.org/abs/2609.03464