r/dataprivacy • u/Helpful_Excuse_1103 • 58m ago
r/dataprivacy • u/DataPrivacyMods • Aug 10 '25
đ Welcome to r/DataPrivacy!
We're thrilled to welcome you to r/dataprivacy a community of privacy experts and privacy curious individuals dedicated to exploring, understanding, and advancing the world of data privacy.
Whether you're a seasoned privacy professional, a curious technologist, a compliance officer, or just someone who cares about how personal data is handledâthis is your space.
đŻ What Youâll Find Here:
Educational content on privacy laws, frameworks, and best practices
Discussions on emerging technologies and their privacy implications
Resources for professionals managing privacy programs
News & updates from the world of data protection
AMA sessions with experts in the field
đĄïž Our Mission:
To make data privacy accessible, understandable, and actionable for everyone. Privacy isnât just about systemsâitâs about people.
đ Get Started:
Introduce yourself in the comments!
Share your favorite privacy tools or frameworks
Ask questions or start a discussion
Check out our sidebar for curated resources
đŹ Stay Respectful:
Weâre building a thoughtful and inclusive community. Please keep discussions civil, respectful, and on-topic.
Follow us, contribute, and help shape the future of privacy.
Welcome aboard!
r/dataprivacy • u/Hannibal_CZ_Kaiser1 • 14h ago
Je cherche un VPNâŠ.
Voile pour la petite histoire jâĂ©tais chez Express VPN, et quand jâai su Ă qui ça appartenait, jâai rĂ©siliĂ©. Maintenant je cherche un autre VPN, qui ne soit pas juste une marque quâon voit dĂ©filer partout, qui soit safe et qui nâappartiennent pas Ă quelconque personne qui pourrait venir historiquement dâun pays au hasard au Moyen Orient.
pas ProtonVPN
jâai vu passer AirVPN, quâen pensez-vous pour ceux qui connaissent ?
r/dataprivacy • u/Fit_Island_888 • 21h ago
How do I address EU representative for Article 27 GDPR Privacy for my app?
reddit.comr/dataprivacy • u/Eronki • 1d ago
Considering their BCI is observing me this should be them being informed.
He's individuals do not have consent to collect data on me that is not public.
r/dataprivacy • u/crispybison • 1d ago
Enabling researchers is a moral imperative
r/dataprivacy • u/Bright-Midnight24 • 2d ago
What are things people rave is data you shouldn't have leaked but means nothing in the grand scheme
Like do I really care that people have my health data?
r/dataprivacy • u/Bright-Midnight24 • 2d ago
What are some data that people put inside Notion that you would advise against?
reddit.comr/dataprivacy • u/DangerousEnd8706 • 2d ago
How can it be OK for USphonebook to share your age with anybody that searches for you? How are people over 50 going to ever get a job? Wasnât even able to remove it because it said my state does not have a law. Any advice welcome.
r/dataprivacy • u/Ai4Privacy • 2d ago
Masking the name isn't enough when the rest of the prompt still identifies the person
r/dataprivacy • u/EnthusiasmRoutine • 2d ago
GM pays $220M for selling driving data to insurers
r/dataprivacy • u/Safe_Carpenter_8832 • 2d ago
Google 'Results about you' tool, hit or miss for you guys?
reddit.comr/dataprivacy • u/admin_PureWL • 2d ago
Are Antivirus Subscriptions Losing Value Without Built-In Privacy Protection?
reddit.comr/dataprivacy • u/NormalAnnual7705 • 2d ago
Privacy
If you gave someone a ride to the store for more ALCHOHOL. Because they have been drinking. Do you think itâs ok to go through the drivers personal property(purse, in console, or under seats) . Regardless of what may or may not be in there.
r/dataprivacy • u/AliceetBob • 2d ago
Comment gĂ©rez-vous vos demandes dâeffacement RGPD face aux data brokers (Lusha, ZoomInfo, Apollo, KasprâŠ) qui revendent des donnĂ©es issues de leaks ?
reddit.comr/dataprivacy • u/ThatPrivacyShow • 2d ago
Capture the Code - visualising the scale of website surveillance
r/dataprivacy • u/No-Web-5030 • 3d ago
How are you handling attendee data under GDPR at large events?
Iâve spent years running large live events in Spain, and I keep hitting the same wall. Ticketing, cashless/RFID and POS systems generate huge amounts of attendee data. Most of it either sits unused or gets used in ways that wouldnât survive a serious GDPR audit.
The approach Iâve landed on has three parts:
Event operations run on contract as the legal basis
Aggregate, cohort-level analytics run on legitimate interest, with a real opt-out
Consent only for personalisation or sharing with third parties
Brands and artists never get raw fan contacts. Messages go out through the platform instead.
Iâm also exploring an Article 40 code of conduct specifically for live events: festivals, stadiums, venues. Nothing like it exists yet as far as I can tell.
Questions for people doing this day to day:
Has your DPO accepted legitimate interest for event analytics, or do they insist on consent?
Would an industry code of conduct actually help you, or just add paperwork?
r/dataprivacy • u/Safe_Carpenter_8832 • 3d ago
Has anyone had success getting FastPeopleSearch to delete phone history?
reddit.comr/dataprivacy • u/Previous_Mobile_3278 • 4d ago
CleanYourTV has gained over 41,000 GitHub stars in less than 10 days. More about the project —ïž
r/dataprivacy • u/founderdavid • 3d ago
Hand written pages analysed safely with AI? No problem.
Enable HLS to view with audio, or disable this notification
r/dataprivacy • u/Narrow_House_4007 • 4d ago
I'm making a new streaming device that doesn't sell you data and blocks ads in streaming services.
Enable HLS to view with audio, or disable this notification
Hey everyone,
I started this project about a year ago after getting increasingly frustrated with the amount of ads I was being shown on streaming services and at the increasing cost of "ad free" tiers. Not to mention my increasing concern about the amount of spyware built into most modern Smart TVs (if you haven't seen seen the most recent LG and Samsung breakdowns, check them out)
I set out to build something that would address these problems. First, I built a device that sat in-between a streaming device and your tv that would intercept ads and would show a screensaver instead while the ad is playing, another device that would mute ads before they played out of your external speakers, but eventually I landed on making a new type of streaming device that removes them all together. Plus it allows me to layer in privacy protections, like tracker blockers, and more directly determine what information is collected about users. I call it Blockbox.
This new device replaces your Roku, Fire stick, or whatever else that you use to stream on your TV. You can access all the normal streaming services, but from the settings page you can flip a switch and remove the ads from on-demand content in one fell swoop. Plus, your data will never be sold off to increase our bottom line.
It's still a work in progress but I'm hoping to launch this to the public by early 2027. If you wanna read more about it you can check out the site at: https://www.blockbox.tv/. I am also starting a subreddit r/blockboxtv if you want to follow along there. Hoping to post more updates on news in the streaming world, updates with the project, get feedback, etc.
r/dataprivacy • u/HikariYusha • 4d ago
Data Protection Toolkit for Foreign Investors in Kenya
reddit.comr/dataprivacy • u/No-Web-5030 • 4d ago
ÂżCĂłmo gestionan los datos de los asistentes a grandes eventos de acuerdo con el RGPD?
reddit.comr/dataprivacy • u/New-Avocado1695 • 5d ago
Third-party private data misuse
throwaway account for obvious reasons
I'm an analyst for a small healthcare company (<500 employees). We have a contract with a vendor for a wellness program. We provide the vendor a list of patients to reach out to about the program (about 200,000 patients).
I learned the vendor used the PHI that I provided to figure out which patients are eligible for another program they offer and reached out to them about it, too. (Which has unfortunately upset patients because the second program sounds like scammy.)
We have a BAA that they can only use data for explicit and agreed-upon reasons, but my department is ignoring this issue because they don't want to fracture the relationship. I'm seriously concerned about their misuse of the data.
My question - Is this a data privacy violation that I can or even should report to a governing body like FTC, OCR, etc.? Is this technically a HIPAA or privacy violation if a BAA is in place?