10 votes

Interpreting GDPR data requests: Why does British Airways need to know that I'm 98% LGBT?

3 comments

  1. [3]
    Greg
    Link
    One person's experience of what happens when you start diving into your own data now that GDPR gives the right to request it. The questions start with a relatively benign but reasonable concern:...

    One person's experience of what happens when you start diving into your own data now that GDPR gives the right to request it.

    The questions start with a relatively benign but reasonable concern:

    Naturally; I’m wondering what one could have possibly done or given to BA to be deemed a ‘sensitive customer!?’ It’s definitely not any disability info as all those are in separate fields (and are empty as I’d expect) nor is it any historical issues of “unruly behaviour”, “suspected intoxication incident” or “abuse risk to public/staff” or “legal risk” (other 4 categories listed on the extended report and thankfully all negative).

    But it quite rapidly hits information that could cause a person serious issues:

    How “% LIKELIHOOD OF BEING GAY/LESBIAN/TRANSSEXUAL/BISEXUAL = 98%” is required for BA’s operations is beyond me (I guess targeted marketing). I’m more offended that they think I’m 2% straight … You’d be surprised at how much random data is out there and how eventually that 98% of being gay made its way to the defense services in Saudi Arabia (a country I once lived in so wouldn’t really want them knowing that at the time) via data sale after data sale after more data sale!

    11 votes
    1. [2]
      Adys
      Link Parent
      Christ. This idea that this sort of nonessential data is ok to store, let alone sell or share... Complete negligence.

      Christ. This idea that this sort of nonessential data is ok to store, let alone sell or share...

      Complete negligence.

      8 votes
      1. Gaywallet
        Link Parent
        The problem is we don't have extensive enough laws on what is and is not permissible to store, let alone how certain data can be stored. I'm glad the GDPR exists so that people can start surfacing...

        The problem is we don't have extensive enough laws on what is and is not permissible to store, let alone how certain data can be stored. I'm glad the GDPR exists so that people can start surfacing the extent to which data is being captured (way more than is necessary), but it's going to be a while before any of this gets sorted out legally.

        We live in a really weird world right now where people with enough money can get access to an absurd amount of information on each person.

        4 votes