Would GDPR allow to withdraw consent for the intermediary?
What if I disallow intermediary to handle my data but some other third party I gave permission to process data uses this intermediary?
> 1. the right to know, through a general privacy policy and with more specifics available upon request, what personal information a business has collected about them, where it was sourced from, what it is being used for, whether it is being disclosed or sold, and to whom it is being disclosed or sold;
> 2. the right to “opt out” of allowing a business to sell their personal information to third parties (or, for consumers who are under 16 years old, the right not to have their personal information sold absent their, or their parent’s, opt-in);
> 3. the right to have a business delete their personal information, with some exceptions;
In fact, this entire facebook announcement looks like it's just compliance for #1.
Good for them for not waiting until the month before like GDPR, but don't be fooled that they're showing this information out of the goodness of their hearts.
The data controller, in this case the "original" company is responsible for collecting an informed concent to use your data for that specific use unless the use is a requirement to do business (i.e. invoicing, not advertising). It does not carry over to another company by shifting this to the processor.
The intermediary is just a data processor, and while they also have to follow gdpr it's the data controller who is responsible that the intermediary actually follows the laws.
As far as I can tell facebook will just tell you who is uploading your data but then you can pursue them if you do not believe they have your concent to do so.
Would GDPR allow to withdraw consent for the intermediary? What if I disallow intermediary to handle my data but some other third party I gave permission to process data uses this intermediary?