This document discusses dating, data portability, and deception in the context of GDPR. It begins by providing background on the author's experience with online dating sites. It then shows snippets of personal data exported from OkCupid and Plenty of Fish in response to a GDPR data access request. The document raises concerns about what personal data dating sites collect and how it could be used for deception. It explores how data portability under GDPR may support innovation but has limitations. Finally, it proposes an exercise for the group to imagine new services using dating profile data in competitive, complementary, and unrelated ways.
4. I was once, a bit of a serial dater *
* Compared to the typical number of dates people go on before committing to a relationship
5. I was once called,
the wikipedia of online dating
Northern Lass in The Guardian
6. Match, Guardian Soulmates, OkCupid,
Plenty of Fish, Zoosk, Tinder, Woome,
How about we, Badoo, Bumble, and
more...
7. Match.com, an operating business of IAC, had
acquired OkCupid for $50 million in cash. Many
Readers expressed worry that they would now have
to pay for OkCupid's free dating services.
Internet denizens have also pointed out that a
popular OKCupid article from last year titled “Why
You Should Never Pay For Online Dating” has been
taken down from the company's blog. "I chose to
take that down. Match didn't ask," Yagan says,
denying that the other site was attempting to censor
OkCupid
@cubicgarden | https://cubicgarden.com/2011/02/02/i-really-want-dataportability-for-online-dating-as-okcupid-gets-bought-by-match/ | https://mashable.com/2011/02/02/okcupid-match-no-charge/
I want dataportability…!
9. @cubicgarden | https://www.theguardian.com/technology/2017/sep/27/tinder-data-privacy-tech-eu-general-data-protection-regulation
Getting your data from Tinder is really hard
Given the popularity of her story, and my overflowing
inbox, I would say many agree. And indeed, you
should expect more similar stories to be unearthed
in the future because of the upcoming General Data
Protection Regulation (GDPR).
From May 2018, the new European-level regulation
will come into force, claiming wider applicability –
including on US-based companies, such as Tinder,
processing the personal data of Europeans – and
harmonising data protection and enforcement by
“levelling up” protections for all European residents.
10. Dating sites are a mine of personal data
@cubicgarden | http://www.pof.com | http://www.okcupid.com
11. General data protection regulation is your friend
@cubicgarden | https://cubicgarden.com/2018/05/24/data-portability-and-gdpr-been-waiting-a-long-time-for-this/
Dear {service}
I am making this request for access to personal data pursuant to Article 15 of the General Data Protection Regulation. I am still concerned that your company’s information practices may be
putting my personal information at undue risk of exposure or in fact has breached its obligation to safeguard my personal information.
I would like you to be aware at the outset, that I expect a reply to my request within one month as required under Article 12, failing which I will be forwarding my inquiry with a letter of complaint
to the Information Commissioner’s Office.
Please advise as to the following:
Please confirm to me whether or not my personal data is being processed. If it is, please provide me with the categories of personal data you have about me in your files and
databases.
…
Please advise as to what training and awareness measures you have taken in order to ensure that employees and contractors are accessing and processing my personal data in
conformity with the General Data Protection Regulation.
Thank you,
Ian
13. Snippet of OkCupid data
@cubicgarden | https://cubicgarden.com/2018/05/24/data-portability-and-gdpr-been-waiting-a-long-time-for-this/
{
"answer_choices": {
"1": "Split the bill",
"2": "Pay the whole bill",
"3": "Have them pay the whole bill",
"4": "It doesn't matter to me"
},
"prompt": "It’s your first date. Do you split the bill, pay the whole bill, have them pay the whole bill",
"question_id": 21181,
"user_acceptable_answers": [
"Split the bill"
],
"user_answer": "Split the bill",
"user_answered_publicly": "yes",
"user_importance": "mandatory"
},
17. Apps make
money from
attention &
personal data
@cubicgarden | https://www.youtube.com/watch?v=d6MfCdo6RoQ
Dating sites are a mine of personal data
18. @cubicgarden
(POF) Elements of interest
BasicSearchData -
AdvancedSearchData - What is this?
Images - attached
What is missing? - Ranking, rating, etc...
19. @cubicgarden
(OkCupid) Elements of interest
login_history - Every single time logged in…
geolocation_history -
essays - ?
messages - One side conversation
photos - In links
What is missing? - Ranking, rating, etc...
22. @cubicgarden | https://theodi.org/article/will-gdpr-and-data-portability-support-innovation/
What’s missing?
“Whilst the right to data portability clearly has the potential to support innovation, there
are a number of factors that may limit its effectiveness.
Importantly, the right’s strength will depend heavily on the definition of personal
data under GDPR. The Article 29 Data Protection Working Party indicates that data
which is ‘entered’ by an individual or ‘generated’ through their use of a product or
service will fall within that definition, whilst that which is ‘derived’ or ‘inferred’ from this
data will not.
A narrow definition of personal data will restrict the types of new products and service
made possible by the right to data portability. In the peer-to-peer accommodation
example, this could mean that a host on an accommodation platform could port basic
profile information but not their reputational scores.