← Back to context

Comment by AlienRobot

17 days ago

Weird that I have to get a list of all the cookie vendors that know I visit a website to show me an ad about something I already bought but the guys with my ID don't need to be listed.

GDPR isn't a cookie law — it's a PII law. They need to tell you all parties that get your ID picture, or they're in breach.

  • GDPR is not a PII law. The term is not mentioned once in GDPR. GDPR speaks of "personal data", which as Wikipedia puts it "is significantly broader".