8 comments

  • petilon1 hour ago
    I hope other states adopt this. One of the biggest mistakes I have made is giving my real phone number to Dun & Bradstreet. Now the spam calls and messages (from people they sold my info to) won't stop. I don't want to change my phone number.
    • cyanregiment18 minutes ago
      Out of curiosity, did you do this as part of Android's awful app submission process
    • cute_boi19 minutes ago
      My number used to belong to an elderly woman, so I keep getting spam texts intended for her. I block the numbers, but they somehow keep sending me spam messages from different ones.<p>I don&#x27;t think there is any solution other than changing my phone number at this point. The issue is fucking sites keep using phone number as 2fa.
    • hackernud3s59 minutes ago
      [dead]
  • bdcravens35 minutes ago
    I wonder if there will be any funny data issues that happen because companies keep track of such requests in a table named &quot;drop&quot;
  • MrZander1 hour ago
    Out of curiosity, does anyone know how this is enforceable for a company not based in California? Can CA fine a data broker that is based in another state but that is selling CA residents&#x27; information?
    • connicpu12 minutes ago
      The company would have to not have any interstate presence at all. If you are a business based in the united states that has customers in California, you are easily reachable under California law.
    • Xorakios53 minutes ago
      Yes; the nexus for legal purposes is generally the location of the user, not the broker
    • hackernud3s1 hour ago
      [dead]
  • igor471 hour ago
    I&#x27;ve been thinking of making a service which automatically sends deletion requests for all my service companies every month. Like, I currently keep a bunch of spyware features in my car turned of, but I have to keep location turned on to use the built in navigation which keeps track of range for me. Would be nice to have a ceiling on that data&#x27;s retention.<p>Long term, if compliance with data deletion requests becomes a pain, maybe companies will finally give us an opt out of surveillance capitalism? Or maybe they&#x27;ll just lock me out of my own car (I guess it&#x27;s their car since I don&#x27;t have root on it, lol)
  • hackernud3s1 hour ago
    What about unregistered data-brokers? I would he happy to sign up to webhooks for when someone wants to delete data.<p>Problem is though, you&#x27;d be revealing more data about them than I probably have by sending it.
  • echelon1 hour ago
    Does this mean people can delete comments from HN?
    • aw16211071 hour ago
      Only if HN counts as a &quot;data broker&quot; under the corresponding law [0]. It states:<p>&gt; “Data broker” means a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship. “Data broker” does not include any of the following:<p>&gt; An entity to the extent that it is covered by the federal Fair Credit Reporting Act (15 U.S.C. Sec. 1681 et seq.).<p>&gt; An entity to the extent that it is covered by the Gramm-Leach-Bliley Act (Public Law 106-102) and implementing regulations.<p>&gt; An entity to the extent that it is covered by the Insurance Information and Privacy Protection Act (Article 6.6 (commencing with Section 791) of Chapter 1 of Part 2 of Division 1 of the Insurance Code).<p>&gt; An entity, or a business associate of a covered entity, to the extent their processing of personal information is exempt under Section 1798.146. For purposes of this paragraph, “business associate” and “covered entity” have the same meanings as defined in Section 1798.146 [1].<p>I don&#x27;t think HN counts as a &quot;data broker&quot; under this definition since they state that they &quot;do not collect any Personal Information unless you choose to provide your email address and&#x2F;or information in the &quot;about&quot; field&quot; for HN accounts and &quot;do not sell or share your Personal Information (as those terms are defined under the CCPA).&quot;<p>[0]: <a href="https:&#x2F;&#x2F;cppa.ca.gov&#x2F;regulations&#x2F;pdf&#x2F;data_broker_reg_delete_act_statute_eff_20260101.pdf" rel="nofollow">https:&#x2F;&#x2F;cppa.ca.gov&#x2F;regulations&#x2F;pdf&#x2F;data_broker_reg_delete_a...</a><p>[1]: <a href="https:&#x2F;&#x2F;leginfo.legislature.ca.gov&#x2F;faces&#x2F;codes_displaySection.xhtml?lawCode=CIV&amp;sectionNum=1798.146" rel="nofollow">https:&#x2F;&#x2F;leginfo.legislature.ca.gov&#x2F;faces&#x2F;codes_displaySectio...</a>.
    • testing2232138 minutes ago
      When I asked them to for safety reasons after I got death threats online, HN told me to stick it.
      • adzm13 minutes ago
        Conversely, they did help me out.
  • unstatusthequo1 hour ago
    The Advertising ID field&#x2F; Nice of them to think of this, but it doesn&#x27;t seem that I could actually <i>get this</i> from any of my Samsung TVs, Apple devices, apps?, etc? So while that field is nice and all, without transparency on getting the ad ID, those fields kind of do nothing.
    • dwattttt6 minutes ago
      Google TV surfaces this under settings (along with the ability to regenerate it, or remove it)
  • amazingamazing1 hour ago
    Why is there a time limit on deletion on this site?
    • millerm1 hour ago
      Because someone commenting leads to others spending time and effort responding. Deleting the comment breaks the chain. Don&#x27;t comment if you feel that it&#x27;s something you might want to delete. Think of commenting as like sending an email, but you get a short window to delete in this place.
      • amazingamazing20 minutes ago
        Do you believe the same about search results not being able to be deleted? I also assume this means you disagree with gdpr?
        • EA-316718 minutes ago
          Do you not see the difference between a person volunteering to broadcast a post, vs a bird party scraping the web to index it for searching?
          • amazingamazing9 minutes ago
            You believe volunteered information must stay on internet forever?
    • aw16211071 hour ago
      This comment [0] from dang might be relevant:<p>&gt; In case it&#x27;s of interest, here&#x27;s the standard language from emails I send people:<p>&gt; We try not to delete posts that got replies, because doing so would be unfair to the other commenters in the thread. What I&#x27;ve done so far is reassign it to a random user ID, so it&#x27;s as if you&#x27;d used a throwaway account to post it and there&#x27;s no link to your main account. Does that work?<p>[0]: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40734348">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40734348</a>
      • testing2232135 minutes ago
        And it’s utterly useless, because your username and all comments get THE SAME random user ID. So once someone identifies that ID as you, it does nothing.<p>When I asked dang to do better after me and my family got death threats online, dang told me “tough luck”<p>To this day thousands of my comments from my old username are on this site and trivially east to link to my real name. (Links to my website, etc)
        • altairprime23 minutes ago
          My first BBS handle was my full real name, and I barely managed to purge myself from DejaNews before Google bought it, so I empathize. The modern internet has been a severe learning experience and, given how many replicas of HN exist, the cat is well out of the bag. Teach others to be more careful, as I do.
          • testing223212 minutes ago
            100%<p>In 2012 when I started commenting here I had no idea it would lead to death threats and I’d have a two year old daughter.