Pinterest Faces Privacy Complaint in France Over Alleged GDPR Violations

Key Points

• French data protection agency, CNIL, has opened an investigation into Pinterest for alleged violations of the General Data Protection Regulation (GDPR).
• The complaint alleges that Pinterest collects and uses personal data without users' consent, and that it fails to provide users with sufficient information about how their data is used.
• The complaint was filed by the French consumer group UFC-Que Choisir, which claims that Pinterest's practices violate several articles of the GDPR.
• If found guilty, Pinterest could face fines of up to 4% of its annual global turnover.
• This is the latest in a series of privacy scandals involving tech companies in recent years.

What is the GDPR?

The General Data Protection Regulation (GDPR) is a European Union law that came into effect in May 2018. The GDPR is designed to protect the personal data of EU citizens, and it gives individuals more control over how their data is collected and used.

The GDPR imposes a number of obligations on companies that collect and process personal data. These obligations include:

• Obtaining consent from individuals before collecting and using their personal data.
• Providing individuals with clear and concise information about how their data will be used.
• Taking steps to protect personal data from unauthorized access, use, or disclosure.
• Giving individuals the right to access, rectify, or erase their personal data.

What are the Allegations Against Pinterest?

The complaint against Pinterest alleges that the company violates several articles of the GDPR. Specifically, the complaint alleges that Pinterest:

• Collects and uses personal data without users' consent.
• Does not provide users with sufficient information about how their data is used.
• Fails to take adequate steps to protect personal data from unauthorized access, use, or disclosure.
• Does not give users the right to access, rectify, or erase their personal data.

The complaint was filed by the French consumer group UFC-Que Choisir, which has a long history of fighting for consumer rights.

What are the Potential Consequences for Pinterest?

If Pinterest is found guilty of violating the GDPR, it could face fines of up to 4% of its annual global turnover. This could amount to billions of dollars in fines.

In addition to fines, Pinterest could also face other penalties, such as being ordered to stop collecting and using personal data, or being forced to delete all of the personal data it has collected.

What Should Pinterest Do?

Pinterest should take the allegations against it seriously and cooperate fully with the CNIL's investigation.

Pinterest should also take steps to ensure that it is in compliance with the GDPR. This could include:

• Obtaining consent from users before collecting and using their personal data.
• Providing users with clear and concise information about how their data will be used.
• Taking steps to protect personal data from unauthorized access, use, or disclosure.
• Giving users the right to access, rectify, or erase their personal data.

Conclusion

The complaint against Pinterest is a reminder that companies need to be aware of their obligations under the GDPR. Companies that fail to comply with the GDPR could face significant fines and other penalties.

Pinterest should take steps to ensure that it is in compliance with the GDPR and that it is protecting the personal data of its users.