You likely deleted them. The flood of emails from Facebook, Twitter, and Uber announcing “privacy policy updates.”
It feels like noise. Clickbait. Corporate fear-mongering.
But deleting those messages might have been a mistake.
The reason for this sudden deluge is the General Data Protection Regulation (GDPR). This massive data privacy law took effect in the European Union on May 25, 2018. It forces tech giants to comply with strict new rules. The goal? Give you control over your online life.
Personal data is the new oil. It is big business. Facebook generated $40 billion in revenue in 2017 without charging users a dime. How? By building a profile on you. They track your gender, education, location, friends, likes, and posts. This data helps them target third-party ads in your feed.
Sometimes that data leaks.
Consider Cambridge Analytica. 87 million Facebook users had their info shared with a conservative political consulting firm without permission. That breach, combined with general public distrust, created the pressure for GDPR.
The law mandates specific changes. Companies must now:
- Use plain language in privacy policies, not baffling legalese
- Get explicit consent before collecting data
- Allow easy opt-outs from data collection
- Let users download their personal data to switch providers
- Notify users of breaches within 72 hours
- Honor the “right to be forgotten” (permanent deletion)
- Protect sensitive health and political data
These rules only legally apply to E.U. citizens. Yet you got the emails.
Why?
Some companies like Microsoft extended GDPR-style protections to users worldwide. Others used the compliance effort to clarify their existing terms. They realized that ignoring the shift in public sentiment costs them trust.
If you care about data privacy, read the emails.
Twitter now allows users to opt out of all interest-based advertising. Facebook lets you opt out of marketing and data collection in your “Ads” settings. You can even download your entire Facebook data profile.
What you do with that power is up to you.
There is one more wrinkle. GDPR requires explicit permission to add you to email lists. No more automatic opt-ins when you buy a product. This applies to Europeans. But some companies are sending “opt-in” requests to everyone.
It is a small shift. A legal one. But it changes how these platforms view you. You are no longer just a resource to be mined. You are a user with rights.
The question is whether you will use them.
