Google’s GDPR Workaround (brave.com)

Article summary

Brave has uncovered a mechanism by which Google appears to be circumventing its GDPR privacy protections, allowing companies to share profile identifiers about a person. This mechanism, called 'Push Pages', is used by Google's DoubleClick/Authorized Buyers ad system, which is installed on over 8.4 million websites. The Irish Data Protection Commission is investigating Google's suspected infringement of the GDPR. Google may face a fine of up to 4% of its global turnover if found guilty.

Main themes

• GDPR compliance
• Google's ad system
• Data privacy
• Regulatory enforcement
• Ad tech industry

What commenters say

• The GDPR is ineffective in regulating large companies like Google, which can afford to pay fines and continue violating the law.
• The GDPR's fine structure is flawed, as a 4% fine on global turnover may not be sufficient to deter large companies from violating the law.
• Small businesses are disproportionately affected by the GDPR, as they lack the resources to comply with the regulations and face significant fines for non-compliance.
• The GDPR has led to some positive changes, such as increased transparency about data sharing and more control for users over their personal data.
• The EU's ability to enforce the GDPR is limited, and large companies like Google may be able to avoid significant fines through legal maneuvering.
• The GDPR's focus on fines rather than personal accountability for executives may not be an effective deterrent against data privacy violations.
• Alternative approaches to regulating data privacy, such as progressive fines based on revenue or profit margins, may be more effective in promoting compliance.