From the “no matter how bad you think it is, it’s worse” department.

  • Gork@lemm.ee
    link
    fedilink
    arrow-up
    22
    ·
    8 months ago

    According to Adaria and Invenda, students shouldn’t worry about data privacy because the vending machines are “fully compliant” with the world’s toughest data privacy law, the European Union’s General Data Protection Regulation (GDPR).

    Then they should have no issues releasing the source code for independent public audit, right?

    • intrepid@lemmy.ca
      link
      fedilink
      arrow-up
      5
      ·
      edit-2
      8 months ago

      How does GDPR mandate a public audit of the code base? Is there such a provision in it? (Not a confrontational question)

      • MentalEdge@sopuli.xyz
        link
        fedilink
        arrow-up
        16
        ·
        8 months ago

        They’re just saying that if they have nothing to hide, they should prove it. Not that GDPR requires an audit.

      • jarfil@beehaw.org
        link
        fedilink
        arrow-up
        3
        ·
        8 months ago

        It doesn’t. You can check the full text at:

        https://eur-lex.europa.eu/eli/reg/2016/679/oj

        The only references to audits, are that supervisors can require an audit, processors need to allow audits by controllers, DPOs need to prepare for audits, and corporations or groups of enterprises need to have audit procedures in place.

        It doesn’t say anything about what kind of audits these need to be, other than to ensure compliance with the law.