{"id":8701,"date":"2020-09-21T10:17:19","date_gmt":"2020-09-21T10:17:19","guid":{"rendered":"https:\/\/dataethics.eu\/?p=8701"},"modified":"2020-09-21T18:50:41","modified_gmt":"2020-09-21T18:50:41","slug":"clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines","status":"publish","type":"post","link":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/","title":{"rendered":"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines"},"content":{"rendered":"<p><strong> New draft guidelines from the European Data Protection Board (EDPB) on social media are clarifying roles and responsibilities for platforms, users and advertisers. The <a href=\"https:\/\/edpb.europa.eu\/our-work-tools\/public-consultations-art-704\/2020\/guidelines-082020-targeting-social-media-users_en\">draft guidelines<\/a> are open for public consultation until October 19, 2020 and can have far reaching implications if not watered down by lobbyism.<\/strong><\/p>\n<p>When SoMe (social media) <strong>tagets users based on detailed profiles<\/strong> about the users, the social media platform and the advertiser are joint controllers and both consent and legitimate interest can be legal bases for data processing. In the latter case it must be on a case-by-case basis, and the result of the assessment must be documented.<\/p>\n<p>With <strong>custom-audience targeting<\/strong>, where the advertiser gives the social media platform access to data about their own customers, EDPB sees the advertiser and the platform as independent controllers. The advertiser can rely on legitimate interest to run the campaign, &#8220;if it previously provided appropriate notice and opportunity for users to opt out so that the campaign is within the individual&#8217;s reasonable expectations,&#8221; according to <a href=\"https:\/\/www.wsgr.com\/en\/insights\/edpb-issues-guidelines-on-social-media-targeting-under-gdpr.html\" target=\"_blank\" rel=\"noopener noreferrer\">Wilson Sonsini<\/a>.<\/p>\n<p>If advertisers use <strong>location-based targeting<\/strong> on SoMe to target individuals, where they are, the advertiser and the platform are joint controllers (the platforms are collecting location data if we allow them) and advertisers must obtain consent for location-based targeting. Legitimate interest can thus not be used here.<\/p>\n<p>If SoMe gets <strong>data via third-parties, e.g. from plug-ins<\/strong> placed at other websites, who then allow the SoMe platform to get data on their users, the advertiser and the platform are joint controllers. When allowing this, the third-party website are jointly liable with the platforms in the way they treat personal data and thus must not only get consent for its own collection of data but also for the social media&#8217;s use of that data.<\/p>\n<p>When it comes to collecting data over time and from various gadgets and used for <strong>automated decision making<\/strong>, consent is always required.<\/p>\n<p><strong>&#8216;Advertising&#8217; is simplified<\/strong><\/p>\n<p>We often hear that individuals say, I don&#8217;t care about getting ads for this and that. But using &#8216;advertising&#8217; in explaining massive collection of data and profiling is too simplified, according to the EDPB.\u00a0 Individuals should be clearly informed about what types of processing activities are carried out and what this means for them in practice.<\/p>\n<p><a href=\"https:\/\/edpb.europa.eu\/our-work-tools\/public-consultations-art-704\/2020\/guidelines-082020-targeting-social-media-users_en\" target=\"_blank\" rel=\"noopener noreferrer\">Read more and give your feedback in the public consultation here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>New draft guidelines from the European Data Protection Board (EDPB) on social media are clarifying&#8230;<\/p>\n","protected":false},"author":8,"featured_media":8702,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,370],"tags":[],"class_list":["post-8701","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-latest-news","category-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines &#183; Dataetisk T&aelig;nkehandletank<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/\" \/>\n<meta property=\"og:locale\" content=\"da_DK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines &#183; Dataetisk T&aelig;nkehandletank\" \/>\n<meta property=\"og:description\" content=\"New draft guidelines from the European Data Protection Board (EDPB) on social media are clarifying...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/\" \/>\n<meta property=\"og:site_name\" content=\"Dataetisk T&aelig;nkehandletank\" \/>\n<meta property=\"article:published_time\" content=\"2020-09-21T10:17:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-09-21T18:50:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dataethics.eu\/wp-content\/uploads\/Merakist.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1490\" \/>\n\t<meta property=\"og:image:height\" content=\"824\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Dataethics\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@dataethicseu\" \/>\n<meta name=\"twitter:site\" content=\"@dataethicseu\" \/>\n<meta name=\"twitter:label1\" content=\"Skrevet af\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dataethics\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimeret l\u00e6setid\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutter\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/\"},\"author\":{\"name\":\"Dataethics\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#\\\/schema\\\/person\\\/e12ef507b252271eeded4c747773df4c\"},\"headline\":\"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines\",\"datePublished\":\"2020-09-21T10:17:19+00:00\",\"dateModified\":\"2020-09-21T18:50:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/\"},\"wordCount\":397,\"publisher\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dataethics.eu\\\/wp-content\\\/uploads\\\/Merakist.jpg\",\"articleSection\":[\"Latest News\",\"News\"],\"inLanguage\":\"da-DK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/\",\"url\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/\",\"name\":\"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines &#183; Dataetisk T&aelig;nkehandletank\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dataethics.eu\\\/wp-content\\\/uploads\\\/Merakist.jpg\",\"datePublished\":\"2020-09-21T10:17:19+00:00\",\"dateModified\":\"2020-09-21T18:50:41+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/#breadcrumb\"},\"inLanguage\":\"da-DK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"da-DK\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/#primaryimage\",\"url\":\"https:\\\/\\\/dataethics.eu\\\/wp-content\\\/uploads\\\/Merakist.jpg\",\"contentUrl\":\"https:\\\/\\\/dataethics.eu\\\/wp-content\\\/uploads\\\/Merakist.jpg\",\"width\":1490,\"height\":824},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Hjem\",\"item\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#website\",\"url\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/\",\"name\":\"Dataetisk T\u00e6nkehandletank\",\"description\":\"Alt om data-etik\",\"publisher\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"da-DK\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#organization\",\"name\":\"Data Ethics\",\"url\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"da-DK\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/dataethics.eu\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/logo_yellow.png\",\"contentUrl\":\"https:\\\/\\\/dataethics.eu\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/logo_yellow.png\",\"width\":124,\"height\":151,\"caption\":\"Data Ethics\"},\"image\":{\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/dataethicseu\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/#\\\/schema\\\/person\\\/e12ef507b252271eeded4c747773df4c\",\"name\":\"Dataethics\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"da-DK\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b2a37b78ba8d5c0e48febc609562f921747205a24e4c3be09a89475359e5a95e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b2a37b78ba8d5c0e48febc609562f921747205a24e4c3be09a89475359e5a95e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b2a37b78ba8d5c0e48febc609562f921747205a24e4c3be09a89475359e5a95e?s=96&d=mm&r=g\",\"caption\":\"Dataethics\"},\"url\":\"https:\\\/\\\/dataethics.eu\\\/da\\\/author\\\/dataethics\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines &#183; Dataetisk T&aelig;nkehandletank","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/","og_locale":"da_DK","og_type":"article","og_title":"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines &#183; Dataetisk T&aelig;nkehandletank","og_description":"New draft guidelines from the European Data Protection Board (EDPB) on social media are clarifying...","og_url":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/","og_site_name":"Dataetisk T&aelig;nkehandletank","article_published_time":"2020-09-21T10:17:19+00:00","article_modified_time":"2020-09-21T18:50:41+00:00","og_image":[{"width":1490,"height":824,"url":"https:\/\/dataethics.eu\/wp-content\/uploads\/Merakist.jpg","type":"image\/jpeg"}],"author":"Dataethics","twitter_card":"summary_large_image","twitter_creator":"@dataethicseu","twitter_site":"@dataethicseu","twitter_misc":{"Skrevet af":"Dataethics","Estimeret l\u00e6setid":"2 minutter"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/#article","isPartOf":{"@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/"},"author":{"name":"Dataethics","@id":"https:\/\/dataethics.eu\/da\/#\/schema\/person\/e12ef507b252271eeded4c747773df4c"},"headline":"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines","datePublished":"2020-09-21T10:17:19+00:00","dateModified":"2020-09-21T18:50:41+00:00","mainEntityOfPage":{"@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/"},"wordCount":397,"publisher":{"@id":"https:\/\/dataethics.eu\/da\/#organization"},"image":{"@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/#primaryimage"},"thumbnailUrl":"https:\/\/dataethics.eu\/wp-content\/uploads\/Merakist.jpg","articleSection":["Latest News","News"],"inLanguage":"da-DK"},{"@type":"WebPage","@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/","url":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/","name":"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines &#183; Dataetisk T&aelig;nkehandletank","isPartOf":{"@id":"https:\/\/dataethics.eu\/da\/#website"},"primaryImageOfPage":{"@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/#primaryimage"},"image":{"@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/#primaryimage"},"thumbnailUrl":"https:\/\/dataethics.eu\/wp-content\/uploads\/Merakist.jpg","datePublished":"2020-09-21T10:17:19+00:00","dateModified":"2020-09-21T18:50:41+00:00","breadcrumb":{"@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/#breadcrumb"},"inLanguage":"da-DK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/"]}]},{"@type":"ImageObject","inLanguage":"da-DK","@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/#primaryimage","url":"https:\/\/dataethics.eu\/wp-content\/uploads\/Merakist.jpg","contentUrl":"https:\/\/dataethics.eu\/wp-content\/uploads\/Merakist.jpg","width":1490,"height":824},{"@type":"BreadcrumbList","@id":"https:\/\/dataethics.eu\/da\/clear-roles-and-responsibilities-for-some-in-draft-for-new-eu-guidelines\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Hjem","item":"https:\/\/dataethics.eu\/da\/"},{"@type":"ListItem","position":2,"name":"Clear Roles and Responsibilities for SoMe in Draft for New EU Guidelines"}]},{"@type":"WebSite","@id":"https:\/\/dataethics.eu\/da\/#website","url":"https:\/\/dataethics.eu\/da\/","name":"Dataetisk T\u00e6nkehandletank","description":"Alt om data-etik","publisher":{"@id":"https:\/\/dataethics.eu\/da\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dataethics.eu\/da\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"da-DK"},{"@type":"Organization","@id":"https:\/\/dataethics.eu\/da\/#organization","name":"Data Ethics","url":"https:\/\/dataethics.eu\/da\/","logo":{"@type":"ImageObject","inLanguage":"da-DK","@id":"https:\/\/dataethics.eu\/da\/#\/schema\/logo\/image\/","url":"https:\/\/dataethics.eu\/wp-content\/uploads\/2021\/04\/logo_yellow.png","contentUrl":"https:\/\/dataethics.eu\/wp-content\/uploads\/2021\/04\/logo_yellow.png","width":124,"height":151,"caption":"Data Ethics"},"image":{"@id":"https:\/\/dataethics.eu\/da\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/dataethicseu"]},{"@type":"Person","@id":"https:\/\/dataethics.eu\/da\/#\/schema\/person\/e12ef507b252271eeded4c747773df4c","name":"Dataethics","image":{"@type":"ImageObject","inLanguage":"da-DK","@id":"https:\/\/secure.gravatar.com\/avatar\/b2a37b78ba8d5c0e48febc609562f921747205a24e4c3be09a89475359e5a95e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b2a37b78ba8d5c0e48febc609562f921747205a24e4c3be09a89475359e5a95e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b2a37b78ba8d5c0e48febc609562f921747205a24e4c3be09a89475359e5a95e?s=96&d=mm&r=g","caption":"Dataethics"},"url":"https:\/\/dataethics.eu\/da\/author\/dataethics\/"}]}},"_links":{"self":[{"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/posts\/8701","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/comments?post=8701"}],"version-history":[{"count":2,"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/posts\/8701\/revisions"}],"predecessor-version":[{"id":8708,"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/posts\/8701\/revisions\/8708"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/media\/8702"}],"wp:attachment":[{"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/media?parent=8701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/categories?post=8701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dataethics.eu\/da\/wp-json\/wp\/v2\/tags?post=8701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}