Plex ignoring GDPR which comes into force on 25th May 2018

I can`t find the article right now, will edit the post if i can find it…
German only, sry: nachrichten.at/nachrichten/meinung/recht/Datenschutz-Warnen-statt-strafen;art178698,2887149

But there is a consensus that Companies will not be fined at first, but will get a list with the things that are non-compliant and a Date until they have to fix said things.

If they don’t get it right till then…

My request for the data held about me has been sent to Plex. They are not compliant with GDPR in a wide variety of ways, so I don’t hold out too much hope of receiving it, but we’ll see!

Some companies like Facebook and Google, are already facing court action over GDPR, looking at these cases, it looks like Plex are also not compliant, for the same reasons as Facebook and Google.

@“Ted C” said:

My request for the data held about me has been sent to Plex. They are not compliant with GDPR in a wide variety of ways, so I don’t hold out too much hope of receiving it, but we’ll see!

@“Ted C” if you don’t get a response that meets GDPR requirements, then I would suggest contacting https://noyb.eu/ about this.

@BigWheel said:
may 25. maybe before.

Still waiting on compliance, are you going to do it today, does not matter as Plex have missed the boat for the 25th May and being compliant with GDPR.

Plex, This is a GDPR inquiry, can you give me the real name and personal email address of the individual in your company, who is Plex’s Data Protection Officer, or confirm who in Plex, and their positions within Plex receives emails from this email address dataprotection@plexapp.com?

… I just wonder what everyone will be using when the EU-GDPR Jack-Booted-Thugs lock the doors at Plex and have all the employees in a Turkish Prison?

Me?

I’m going back to VLC and Windows Explorer.

lol

I feel like Plex is so far down the totem pole on this that they’ll fly under the radar forever. Forget a corporate headquarters, do they even have an office with like some cubicles? I get the impression that they’re just a PO Box with work-from-home employees distributed around the globe. To me this whole thing feels like a haphazard Github project that just has some paid contributors and not a real company. I know they received some VC money at some point, but that was like 4 years ago. I don’t think Plex cares about the GDRP any more than like the developers of like Handbrake or Sonarr do.

@JuiceWSA said:
… I just wonder what everyone will be using when the EU-GDPR Jack-Booted-Thugs lock the doors at Plex and have all the employees in a Turkish Prison?

Me?

I’m going back to VLC and Windows Explorer.

lol

If for any reason Plex does fold, highly unlikely I believe, I would simply use EMBY or what was left of Plex. I have my Plex set up so that I do not need Plex’s servers for running my Plex setup. However future metadata does, I believe, depend to some extent on the Plex servers/system so I guess even though Plex would continue to work I could not really use it moving forward.

But if Plex is mostly under the radar Emby is MUCH better hidden and therefore VERY unlikely to be impacted by anything “government.”

Of course there is always Kodi but that really does not fill my needs as only a couple of devices I own support it.

For simple playback I can use my Rokus with Roku media player and any one of a rather huge numbers of DLNA servers.

There are lots of choices but I strongly doubt they will be needed as Plex is pretty safe from the GDPR as the GDPR is really after the big fish and Plex is quite small in comparison and I think that Plex is closer to compliance than the doomsayers seem to think.

Our address and contact information if you have questions can be found at the bottom of https://www.plex.tv/about/privacy-legal/.

@“MovieFan.Plex” said:
Our address and contact information if you have questions can be found at the bottom of https://www.plex.tv/about/privacy-legal/.

I take it all back, Plex is a real company :smiley:

Quick article about GDRP and companies registered in Switzerland for anybody who’s interested:

@rwoffice said:

@“MovieFan.Plex” said:
Our address and contact information if you have questions can be found at the bottom of https://www.plex.tv/about/privacy-legal/.

I take it all back, Plex is a real company :smiley:

Quick article about GDRP and companies registered in Switzerland for anybody who’s interested:

http://blog.vischer.com/en/the-gdpr-and-switzerland-10-myths-and-misconceptions

Plex is a PO box in Nidwalden, Switzerland … LOL

Only 10 replies since May 25… I figured there would be hundreds by now…

@NewPlaza said:
Only 10 replies since May 25… I figured there would be hundreds by now…

And most of the posts are only tangentially related to Plex’s GDPR compliance. Even for an online forum and even for end of week and weekend the post count does seem hideously low. (I made a typo in hideously and the first suggestion in my spell checker was heinously, that seems almost equally appropriate)

Maybe most folks are just waiting to see what happens or maybe a lot of folks, rightly or wrongly, simply care very little about the bureaucratic attempt to control corporate behavior.

Personally I believe that the ultimate outcome of the GDPR will be business as usual and the abuse of personal data will continue unabated, just better concealed.

I think I used this quote earlier but it fits this whole situation quite well:
“Nothing is illegal if one hundred well-placed business men decide to do it.” Andrew Young

@Elijah_Baley said:

@NewPlaza said:
Only 10 replies since May 25… I figured there would be hundreds by now…

And most of the posts are only tangentially related to Plex’s GDPR compliance. Even for an online forum and even for end of week and weekend the post count does seem hideously low. (I made a typo in hideously and the first suggestion in my spell checker was heinously, that seems almost equally appropriate)

Maybe most folks are just waiting to see what happens or maybe a lot of folks, rightly or wrongly, simply care very little about the bureaucratic attempt to control corporate behavior.

Personally I believe that the ultimate outcome of the GDPR will be business as usual and the abuse of personal data will continue unabated, just better concealed.

I think I used this quote earlier but it fits this whole situation quite well:
“Nothing is illegal if one hundred well-placed business men decide to do it.” Andrew Young

I truly believe you are 100% correct in the ultimate outcome of GDPR. Sad, but true.
It somewhat reminds me of standards. xkcd: Standards

@Elijah_Baley said:
believe that the ultimate outcome of the GDPR will be business as usual and the abuse of personal data will continue unabated, just better concealed.

That. Unfortunately, that.
Though some good is/has come out of it (I get to monitor more easily what Google tracks from me from one URL rather than split across 3-4 different app sites), and many companies are changing TOS and Privacy agreements, I too still believe the transparency will be nil as to what actually goes on behind the curtains.

@rwoffice said:

http://blog.vischer.com/en/the-gdpr-and-switzerland-10-myths-and-misconceptions

@Trotter999 - Before you storm the castle, I’d suggest becoming familiar with that article.

@rwoffice - Good summary. I’d not researched much and like you found that, especially in relation to Swiss (Plex) and the EU.

Though I recommend everyone carrying a pitchfork outside of Plex’s gates read that, I’ll summarize it for most.
The GDPR seems, like so many bureaucratic written directives seem to be, to full of loopholes and clauses.

@Trotter999 said:
@“Ted C” if you don’t get a response that meets GDPR requirements, then I would suggest contacting https://noyb.eu/ about this.

As yet my request has not even been acknowledged.

Just imagine all the apps that will need to be pulled from GooglePay/AppleAppStore as they may be in violation. How fun…

@NewPlaza said:
Just imagine all the apps that will need to be pulled from GooglePay/AppleAppStore as they may be in violation. How fun…

I really hope that comment was at least somewhat “Tongue-in-cheek.” The internet is so bad at giving readers the ability to read expressions and body language. (Except for sites that have the body as their primary focus and reading the body language is like buying Playboy for the articles.)

Even if it were not, those of us in the US will continue to have access to all the unneeded and superfluous apps in the US Google store as the GDPR does not impact the US. We, in the US, are immune to the dubious protections of the GDPR and we can continue to wallow in the lack of protections and allow Google and the rest of the data gatherers to make our data available to the wide world and make everyone more equal in the eyes of the advertisers, government and identity thieves.

They still have the right to violate our rights as much as they want.
:smiley: >:) o:) B) ← These are included in case the humor is missed by some.

Well, I meant it, but as a joke. Do I care, no. But I thought it might be funny IF google had to remove/change apps that are being downloaded in EU. And as far as I can tell there really isn’t “region” apps. And the apps that do exist may or may not care what country you live in so the whole GDPR may not even matter.

I’ve been watching and reading this thread for a while. I find it kind of funny how the arm chair lawyers all think they know/understand what the new requirements are but probably haven’t even read it, or read it correctly as a lawyer would.

Go back and re-read the different links you’ve provided showing why Plex MUST do this or that. While reading your links note terms such as TARGETED, GENERIC, OPTIONAL, PERSONAL and the like.

As an example if I run a site in the USA that doesn’t target you in the EU but you find my site and decide to use my services and I collect NON PERSONAL data I’m just fine. If the data on all my “users” is stolen but there is not any identifiable info who has been hurt except my business data? I can sell you items and collect information needed to ship items to you which are personal and I’m still just fine. Visa, MC already have this covered for the most part and if I separate your financial info from your personal info even better. Most financial transactions have been like this for a long time. The Financial provider will take care of that and give me a payment token, not your CC data, billing address, etc.

On the other hand if I’m collecting information of a personal nature without your consent that is different. If I target the EU with a survey that is generic and non personal I’m fine. If I’m collecting personal info (address, name, etc) it’s different.

Collecting information on a piece of software or web site of how many people use this page or that page in a generic fashion is fine. If I track how many people hit my XYZ page that isn’t personal. If I track specifically every page you specifically visit that is personal. Tracking YOUR SPECIFIC use is problematic without your consent. So for example if what Plex is doing is tracking how many people playback MP4 vs MKV or how many SD vs HD vs 4K items people have in general without it being tied to specific people then there isn’t a problem. None of your personal information has been violated.

It’s similar to having someone stand on the side of a road counting cars to see how busy different roads are so the city can better know what roads to fix first. This would be generic data gathering. Now on the other hand if someone was following you specifically around to see what roads you use, then this is personal and problematic.

With that said Plex should allow easier OPT IN/OUT in general regardless of where you live. Regardless of any laws there is popular opinion of what is right or wrong and choice is always seen favorably.

What these laws are trying to do at the most basic level is stop theft. Yes, someone taking your personal identifiable information without your consent is theft. Someone using your personal identifiable data or services without your consent or reward is theft. Someone using generically gathered data is just doing smart business.

A simple way to think about it is if the data gathered was exposed who could be hurt? Could you the specific user be tied to this data?

1 Like