← Back to context

Comment by kryptiskt

3 years ago

That's a view through rose-colored glasses, GDPR isn't that powerful (and it only applies to user-supplied data, not all personal data). As a relevant example, in Sweden your taxable income is public information.

> As a relevant example, in Sweden your taxable income is public information.

Same in Norway. However taxable income does not equal salary. And at least in Norway, you can log in and see who requested the tax data about you, and companies can't mine this data.

The main problem with GDPR is that it is hard to enforce because the enforcing authorities are overworked, focusing on the wrong things, and bogging themselves down in their own bureaucracy.

> only applies to user-supplied data, not all personal data

I don't believe this is correct: https://gdpr-info.eu/art-4-gdpr/

Maybe you're confusing this with the different lawful grounds for processing, and the fact that consent has quite strict requirements but there are other lawful grounds that don't require consent? https://gdpr-info.eu/art-6-gdpr/

> in Sweden your taxable income is public information.

GDPR protects against automated personal data processing, not against publishing of public - by the law - data.