Post #3134782
2025-09-26 21:19 UTC
@riley@toot.cat
No they only host the software their clients are in breach of gdpr and need to handle the mess.
I wonder how many of their customers sued then.
@RakowskiBartosz@hachyderm.io @thisismissem@hachyderm.io @WPalant@infosec.exchange
Replies (1)
-
@WPalant@infosec.exchange 2025-09-26 21:27
@rlcw@ecoevo.social Doubtful. If they have a signed data processing agreement then the software vendor is likely in violation of this agreement, making them the guilty party under the GDPR. And if there is no data processing agreement because the clients aren’t aware of data processing taking place then the vendor is also liable. The clients are only liable if they were handling personal data and knew that the software would store it elsewhere, yet failed to acquire a data processing agreement. Either way, I can answer your question: zero. GDPR enforcement is spotty to say the least. It doesn’t happen even in far more obvious cases. @riley@toot.cat @RakowskiBartosz@hachyderm.io @thisismissem@hachyderm.io