I wrote to Flock's privacy contact to opt out of their domestic spying program (honeypot.net)

Article summary

The author of the article wrote to Flock's privacy contact to opt out of their domestic spying program, citing the California Consumer Privacy Act (CCPA), but Flock replied that they cannot fulfill the request as they are a service provider and processor for their customers, who own and control the data. Flock claimed that their customers are responsible for assessing and responding to such requests. The author disputes Flock's interpretation of the CCPA, arguing that they are obligated to comply with their request. The exchange highlights the complexities of data ownership and privacy laws.

Main themes

• Data Privacy
• CCPA Compliance
• Surveillance Technology
• Data Ownership
• Corporate Responsibility

What commenters say

• Flock's claim that they do not own the data and therefore cannot delete it is a misinterpretation of the CCPA, which obligates them to comply with requests to delete personal data.
• The fact that Flock's customers own the data does not absolve Flock of their responsibility to ensure that the data is handled in accordance with privacy laws.
• Flock's business model, which involves collecting and processing large amounts of personal data, makes them a data broker and subject to relevant regulations.
• The distinction between Flock's role as a service provider and a data broker is not clear-cut, and their actions may be seen as a form of data brokerage, making them liable under data broker legislation.
• The complexity of data ownership and privacy laws makes it difficult for individuals to navigate and assert their rights, and companies like Flock may be taking advantage of these complexities to avoid accountability.
• Flock's contracts with their customers may not be sufficient to shield them from liability for mishandling personal data, and they may still be obligated to comply with requests to delete personal data.