Naughty List - Tech companies that won't delete your information

@scotty_bowler 😂👀

@scotty_bowler yep! May 25th is going to prove a very good day for us all :) albeit a scary one for those of us having to manage the Data Protection at our organisations! 🤪

@scotty_bowler Facebook might be in actual breach of GDPR, because when you delete your account, the people you have messaged still have access do your messages, even though it is supposed to be deleted 🙂 It's removed from your end, but not those you have been in contact with.

@fredrikaurdal not really. They need to delete or anonymise your personal information, in other words information that can identify you. Your messages without metadata are gdpr compliant.

@fredrikaurdal 23andme needs to be on that list. If your genetic data is linked to one of their studies, they will never delete your data.

@kay0stheory Do you have more info and a source to that? Feel free to share it on slack: https://secured.fyi/contribute.html

Regardless of whether you delete your account, your data will never be removed from 23andme. It makes sense, but I doubt most people are aware of that. @fredrikaurdal https://www.23andme.com/en-ca/ab... "If you no longer wish to participate in our Services or no longer wish to have your personal information be used, you may close your account by sending a request to Customer Care. When closing an account, we remove all Genetic Information within your account (or profile) within thirty (30) days of our receipt of your request. As stated in any applicable Consent Document, however, Genetic Information and/or Self-Reported Information that you have previously provided and for which you have given consent to use in 23andMe Research cannot be removed from ongoing or completed studies that use the information. Our contracted genotyping laboratory may also retain your Genetic Information as required by local law and we may retain backup copies for a limited period of time pursuant to our data protection policies. In addition, we retain limited Registration Information related to your order history (e.g., name, contact, and transaction data) as long as your account is active or as needed to provide you services, as well as for accounting, audit and compliance purposes." To be fair, it's not just 23andme. It's probably every company providing health and ancestry services based on your genotype data. e.g. HomeDNA, AncestryDNA, Helix, GoForward. I just haven't personally confirmed it yet.

@kay0stheory Interesting, added.

@kestasvv It's based on the policy of the individual services, but also as reported by individuals.

@llabball You mean Microsoft Azure?

@fredrikaurdal Yes. Thats the correct name.

@llabball Added.

@habib_kamara It's good to know what's going on, so people can have the information they need to make the best decisions in an open market.

@fredrikaurdal definitely agree

@anujaya You are right, thanks for pointing that out. I made changes to Google Drive. Any other services I should correct?

@fredrikaurdal Nothing else I saw

@henry_fraser Absolutely, sources to all decisions will be included in the next major release 🙂 However, I do include some of the sources in the change log when possible: https://secured.fyi/changelog

@jtreichel Duly noted 🙂