They are deliberately misinterpreting that law. This law only applies for data that they no longer have a legitimate reason to retain. It’s not just a rolling 3-year counter that starts every time you log out and gets reset every time you log in.
I haven’t logged into Facebook in well more than 3 years they haven’t deleted my data and that isn’t a violation, I haven’t deleted my account (I can’t I’ve forgotten the password and no longer have access to the original email, it’s my problem).
It’s only for things now lapsed gym memberships, or car dealerships keeping your data after you purchase a vehicle from them. They can keep that data for 3 years and then they have to delete it.
What would be the point of misinterpreting it? They have no such limit in the US; if it were for some nefarious purpose you’d think they’d implement it everywhere.
It’s this. I don’t feel like looking up the relevant part, but feel free to if you like.
The relevant bit is this one here:
It’s hard to argue that buying something on a digital platform is not a contract between the user and the platform.
Thanks! The 3 year time limit isn’t mandated and was chosen by Sony. I believe other companies have chosen even lower ones.
Which is, of course, wrong: The duration of contract for a store like Sonys is the whole time the store is up and running.
Well, they did it due to the GDPR regulations for some reason, since they don’t do it in not-EU places.
They are deliberately misinterpreting that law. This law only applies for data that they no longer have a legitimate reason to retain. It’s not just a rolling 3-year counter that starts every time you log out and gets reset every time you log in.
I haven’t logged into Facebook in well more than 3 years they haven’t deleted my data and that isn’t a violation, I haven’t deleted my account (I can’t I’ve forgotten the password and no longer have access to the original email, it’s my problem).
It’s only for things now lapsed gym memberships, or car dealerships keeping your data after you purchase a vehicle from them. They can keep that data for 3 years and then they have to delete it.
What would be the point of misinterpreting it? They have no such limit in the US; if it were for some nefarious purpose you’d think they’d implement it everywhere.