#GDPR #security
Turned out that you can send a request on behalf of another person - and if the service does not pay enough attention to verifying the identity of the applicant, you will receive his personal data:
https://www.vice.com/en_us/article/xwe8wz/researchers-show-how-europes-data-protection-laws-can-dox-people
Turned out that you can send a request on behalf of another person - and if the service does not pay enough attention to verifying the identity of the applicant, you will receive his personal data:
https://www.vice.com/en_us/article/xwe8wz/researchers-show-how-europes-data-protection-laws-can-dox-people
VICE
Researchers Show How Europe's Data Protection Laws Can Dox People
A security researcher was able to get companies to give him his fiance’s Social Security Number, passwords, and other sensitive private information with her consent by taking advantage of GDPR’s 'Right of Access' requests.