Mozilla says it deleted promise because “sale of data” is defined broadly.

Firefox maker Mozilla deleted a promise to never sell its users’ personal data and is trying to assure worried users that its approach to privacy hasn’t fundamentally changed. Until recently, a Firefox FAQ promised that the browser maker never has and never will sell its users’ personal data. An archived version from January 30 says:

Does Firefox sell your personal data?

Nope. Never have, never will. And we protect you from many of the advertisers who do. Firefox products are designed to protect your privacy. That’s a promise.

That promise is removed from the current version. There’s also a notable change in a data privacy FAQ that used to say, “Mozilla doesn’t sell data about you, and we don’t buy data about you.”

The data privacy FAQ now explains that Mozilla is no longer making blanket promises about not selling data because some legal jurisdictions define “sale” in a very broad way:

Mozilla doesn’t sell data about you (in the way that most people think about “selling data”), and we don’t buy data about you. Since we strive for transparency, and the LEGAL definition of “sale of data” is extremely broad in some places, we’ve had to step back from making the definitive statements you know and love. We still put a lot of work into making sure that the data that we share with our partners (which we need to do to make Firefox commercially viable) is stripped of any identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like OHTTP).

Mozilla didn’t say which legal jurisdictions have these broad definitions.

Some obvious jurisdictions that come to mind, are US vs. EU:

  • US: protects “Personally Identifiable Information” (PII)
  • EU: protects “Personal Information” (PI)

The color of your hair… is PI in the EU, it isn’t PII in the US since it’s not enough to pinpoint you as a single person.

Under US law, a data broker can gather a bunch of “not-PII, just PI”, and refine it into profiles that can end up pinpointing single individuals.

Under EU law, that’s illegal; no selling PI, period.

Scrubbles
link
fedilink
English
116h

This is completely accurate, and people don’t know how non anonymous it is.

Your hair one for example. Who cares, say you even have brunette hair, something generic. Okay, then let’s add on that you’re using an iPhone. How narrow is the search now? What state you’re in? Who owns a specific model of TV?

I would argue that with only just a few data points you could be identified.

And now they are taking everything you put into your browser and everything you take out. Add some AI pizazz and they’ll be able to build a pretty accurate profile about you.

Create a post

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community’s icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

  • 1 user online
  • 76 users / day
  • 248 users / week
  • 733 users / month
  • 2.12K users / 6 months
  • 1 subscriber
  • 3.75K Posts
  • 72.7K Comments
  • Modlog