3D's: Dating, Deception and Data Portability | Mozfest 2019

@cubicgarden | https://www.flickr.com/photos/x1brett/14972080124
Ian Forrester
@cubicgarden
@cubicgarden@mastodon.cloud.com
3D's: Dating, Deception and Data Portability
GDPRedition

@cubicgarden | https://discourse.mozilla.org/t/3ds-dating-dataportability-deception-gdpr-edition/46717
Notes
https://discourse.mozilla.org/t/3ds-dating-dataportability-deception-gdpr-edition/46717

I was once, a bit of a serial dater *
* Compared to the typical number of dates people go on before committing to a relationship

I was once called,
the wikipedia of online dating
Northern Lass in The Guardian

Match, Guardian Soulmates, OkCupid,
Plenty of Fish, Zoosk, Tinder, Woome,
How about we, Badoo, Bumble, and
more...

Match.com, an operating business of IAC, had
acquired OkCupid for $50 million in cash. Many
Readers expressed worry that they would now have
to pay for OkCupid's free dating services.
Internet denizens have also pointed out that a
popular OKCupid article from last year titled “Why
You Should Never Pay For Online Dating” has been
taken down from the company's blog. "I chose to
take that down. Match didn't ask," Yagan says,
denying that the other site was attempting to censor
OkCupid
@cubicgarden | https://cubicgarden.com/2011/02/02/i-really-want-dataportability-for-online-dating-as-okcupid-gets-bought-by-match/ | https://mashable.com/2011/02/02/okcupid-match-no-charge/
I want dataportability…!

Straight from
drug dealing
handbook?

@cubicgarden | https://www.theguardian.com/technology/2017/sep/27/tinder-data-privacy-tech-eu-general-data-protection-regulation
Getting your data from Tinder is really hard
Given the popularity of her story, and my overflowing
inbox, I would say many agree. And indeed, you
should expect more similar stories to be unearthed
in the future because of the upcoming General Data
Protection Regulation (GDPR).
From May 2018, the new European-level regulation
will come into force, claiming wider applicability –
including on US-based companies, such as Tinder,
processing the personal data of Europeans – and
harmonising data protection and enforcement by
“levelling up” protections for all European residents.

Dating sites are a mine of personal data
@cubicgarden | http://www.pof.com | http://www.okcupid.com

General data protection regulation is your friend
@cubicgarden | https://cubicgarden.com/2018/05/24/data-portability-and-gdpr-been-waiting-a-long-time-for-this/
Dear {service}
I am making this request for access to personal data pursuant to Article 15 of the General Data Protection Regulation. I am still concerned that your company’s information practices may be
putting my personal information at undue risk of exposure or in fact has breached its obligation to safeguard my personal information.
I would like you to be aware at the outset, that I expect a reply to my request within one month as required under Article 12, failing which I will be forwarding my inquiry with a letter of complaint
to the Information Commissioner’s Office.
Please advise as to the following:
Please confirm to me whether or not my personal data is being processed. If it is, please provide me with the categories of personal data you have about me in your files and
databases.
…
Please advise as to what training and awareness measures you have taken in order to ensure that employees and contractors are accessing and processing my personal data in
conformity with the General Data Protection Regulation.
Thank you,
Ian

@cubicgarden
GDPR data (OkCupid)
UserData.html UserData.txtUserData.json

Snippet of OkCupid data
{
"answer_choices": {
"1": "Split the bill",
"2": "Pay the whole bill",
"3": "Have them pay the whole bill",
"4": "It doesn't matter to me"
},
"prompt": "It’s your first date. Do you split the bill, pay the whole bill, have them pay the whole bill",
"question_id": 21181,
"user_acceptable_answers": [
"Split the bill"
],
"user_answer": "Split the bill",
"user_answered_publicly": "yes",
"user_importance": "mandatory"
},

@cubicgarden
GDPR data (Plenty of Fish)
UserData.pdf Profile_*.jpgUserData.json

"MaritalStatus": "Divorced",
"WantChildren": "Undecided",
"HaveChildren": "No",
"Smoke": "No",
"Drugs": "No",
"Drink": "Socially",
"Iama": "Male",
"Creationdate": "2014-01-25T03:47:02",
"Profession": "Produce",
"Firstdate": "I'm pretty open about most things...",
"Postalcode": "M1",
"ImageLastupdate": "2018-01-01T07:22:00",
"Religion": "NonReligious",
"Showfav": true,
"SchoolId": "BachelorsDegree",
"FishId": "Geek",
Snippet of Plenty of fish data
"Imagecount": 7,
"CarId": "No",
"IncomeId": "From00To00",
"MemberlevelId": "Basic",
"Siblings": 0,
"Birthorder": 0,
"Intent": "WantRelationship",
"Datekids": "Yes",
"Datesmokers": "Yes",
"EyesId": "Brown",
"PetsId": "NoPets",
"Secondlanguage": "NoSecondLanguage",
"Firstname": "ian",
"FirstnameShow": 1,
"Latitude": 53.000000,
"Longitude": -2.000000

Apps make
money from
attention &
personal data
@cubicgarden | https://www.youtube.com/watch?v=d6MfCdo6RoQ
Dating sites are a mine of personal data

@cubicgarden
(POF) Elements of interest
BasicSearchData -
AdvancedSearchData - What is this?
Images - attached
What is missing? - Ranking, rating, etc...

@cubicgarden
(OkCupid) Elements of interest
login_history - Every single time logged in…
geolocation_history -
essays - ?
messages - One side conversation
photos - In links
What is missing? - Ranking, rating, etc...

@cubicgarden | https://www.youtube.com/watch?v=d6MfCdo6RoQ
Dating deception

@cubicgarden | https://theodi.org/article/will-gdpr-and-data-portability-support-innovation/
What’s missing?
“Whilst the right to data portability clearly has the potential to support innovation, there
are a number of factors that may limit its effectiveness.
Importantly, the right’s strength will depend heavily on the definition of personal
data under GDPR. The Article 29 Data Protection Working Party indicates that data
which is ‘entered’ by an individual or ‘generated’ through their use of a product or
service will fall within that definition, whilst that which is ‘derived’ or ‘inferred’ from this
data will not.
A narrow definition of personal data will restrict the types of new products and service
made possible by the right to data portability. In the peer-to-peer accommodation
example, this could mean that a host on an accommodation platform could port basic
profile information but not their reputational scores.

@cubicgarden | https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/
Data portability
● The right to data portability allows individuals to obtain and reuse their personal
data for their own purposes across different services.
● It allows them to move, copy or transfer personal data easily from one IT
environment to another in a safe and secure way, without affecting its usability.
● Doing this enables individuals to take advantage of applications and services that
can use this data to find them a better deal or help them understand their
spending habits.

Types of data portability
Competitive Complementary Unrelated

@cubicgarden | https://vimeo.com/610179
Data portability services

@cubicgarden | https://www.openhumans.org
Open Humans

@cubicgarden | https://www.openhumans.org/explore-share/
Personal data exploratory

@cubicgarden | https://www.openhumans.org/create/
Imagine the influx of GDPR data?

@cubicgarden | https://medium.com/mydata/data-portability-2-0-is-yet-to-come-1c438c2a96c1 | https://www.bbc.co.uk/news/technology-48825413
Data portability 2.0?

Imagine 3 different services for the data
Competitive Complementary Unrelated
● Spend 10 mins thinking about what you could do with the dating data
● Then present back to the whole group in less than 3 mins

@cubicgarden
Ian Forrester
@cubicgarden
@cubicgarden@mastodon.cloud.com
Thank you for listening, questions?

3D's: Dating, Deception and Data Portability | Mozfest 2019

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à 3D's: Dating, Deception and Data Portability | Mozfest 2019

Similaire à 3D's: Dating, Deception and Data Portability | Mozfest 2019 (20)

Plus de Ian Forrester

Plus de Ian Forrester (20)

Dernier

Dernier (20)

3D's: Dating, Deception and Data Portability | Mozfest 2019