this post was submitted on 23 Oct 2023
891 points (98.3% liked)

Privacy

32120 readers
792 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 18 points 1 year ago (1 children)

They literally replied to his registered email and he has the reply. That would indicate that he has at least access to the account. So with OP's next email quoting the reply ownership over the associated email address should be reasonably established.

[–] [email protected] 7 points 1 year ago (1 children)

That would indicate that ~~he~~ someone has at least access to the account.

[–] [email protected] 1 points 1 year ago

If you can read emails sent to a given address, and send replies from that address, it basically is your email address for all practical purposes no matter who was meant to be using the account. This is not necessarily a good thing and better end-to-end security would be nice but it is what it is. Odds are the app itself would let anyone change the password and log in provided they can read the emails, unless it's using some form of 2FA.