That’s probably a massive GDPR violation. Automated processing of extra sensitive data like political beliefs and religion is not outright forbidden but it’s subject to extra protections.
GDPR article 9 (1) says you can’t play algorithmic guess with people’s religion or political opinions unless you gave express permission to the service provider to do it (i.e. it’s not covered in the general GDPR boilerplate)
Meta got a fine of over a billion euros.
Google got a bunch of smaller fines, but it’s probably way above everyone else in terms of fines.
Microsoft got half a billion.
Even Apple got an 8 million euro fine, but that was more a tap in the wrist to make them think twice about some data collection.
And besides this, large companies are constantly in contact with the authorities and in smaller violations the general policy is to give a warning and let companies stop the illegal data processing voluntarily.
That’s probably a massive GDPR violation. Automated processing of extra sensitive data like political beliefs and religion is not outright forbidden but it’s subject to extra protections.
Sadly you consented to all of it
GDPR article 9 (1) says you can’t play algorithmic guess with people’s religion or political opinions unless you gave express permission to the service provider to do it (i.e. it’s not covered in the general GDPR boilerplate)
Have there been any enforcement actions against big companies yet?
Meta got a fine of over a billion euros. Google got a bunch of smaller fines, but it’s probably way above everyone else in terms of fines. Microsoft got half a billion. Even Apple got an 8 million euro fine, but that was more a tap in the wrist to make them think twice about some data collection.
And besides this, large companies are constantly in contact with the authorities and in smaller violations the general policy is to give a warning and let companies stop the illegal data processing voluntarily.
All of them are a slap on a wrist, even Meta
https://proton.me/tech-fines-tracker