We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·Jun 18·5 min read
I told them forced consent was unlawful. 5 years later it cost Elkjop €1.8M
TL;DR
Elkjop required customers to cancel their membership to opt out of marketing emails, violating GDPR regulations. A complaint was filed with their Data Protection Officer, highlighting that consent must be freely given and not bundled with membership.
✦ Why It Matters
Engineers and researchers must ensure compliance with data protection laws to avoid costly penalties.
Key Takeaways
- Ensure consent mechanisms are clear and voluntary.
- Regularly review compliance with GDPR and ePrivacy Directive.
- Document all communications regarding consent practices.
- Educate teams on data protection regulations and implications.
Full Summary
In 2021, a customer discovered that Elkjop, a Nordic retailer, forced members of its customer club to cancel their membership to stop receiving marketing emails. This practice violated the General Data Protection Regulation (GDPR), which mandates that consent for marketing must be freely given and not a condition of membership.
The customer contacted Elkjop's Data Protection Officer, who confirmed the violation in writing, stating that membership was required to receive marketing offers. This acknowledgment became crucial evidence in the case.
Ultimately, Elkjop was fined €1.8 million for this unlawful practice, highlighting the importance of compliance with data protection laws. The case underscores the need for companies to ensure that consent mechanisms are transparent and respect consumer rights.