[AnnieK]

Originally Posted by bitontheslide

Data protection rules are changing in europe from May. Part of these changes means that companies can only collect data for a specific purpose, for a specific duration and the person providing the information has to actively opt in to providing it, a record kept of them giving permission, and clear method of them being able to opt out

More details can be found here https://ico.org.uk/for-organisations...gulation-gdpr/

Basically, facebook weren't happy that the information collected by CA was not being subsequently re-used for other purposes

Urghhh...GDPR. I have somehow "volunteered" to be data controller for my company and this is now basically the biggest headache in my job. The other major change is people now have the right to be forgotten and all information erased which a lot of companies apparently didnt used to do and retained personal information for years. The penalties are steep for breeches and so a lot of companies, organisations and even government departments are flapping to change procedures to ensure they are compliant.