alt Hacker NewsThe party owning this data (Spirit Airlines) is consenting to the sale. Employees and customers of Spirit consented when they started employment and did business with Spirit, respectively.
Replies
layer8 • today at 12:20 PM
If this were a European company: That’s not how the GDPR works. You can only consent to specific purposes of using the data.
Leynos • today at 12:15 PM
This is why the GDPR (and to a lesser extent the CCPA) is a good thing. The data was supplied for a specific purpose. The handler of the data should have to obtain further consent if they wish to use it for another purpose.
MagicMoonlight • today at 11:50 AM
[dead]
Did they consent? Just because one receives a letter it doesn't mean they “own” it, much less that they are entitled to publish it at their leisure. If Spirit were active in any country with GDPR-style laws, the seller of these data would be most likely investigated.