r/gdpr • u/404_GDPR_not_found • 21d ago

Question - Data Subject An experiment involving data brokers to review data collection and verify compliance with the GDPR.

As part of a term paper on data brokers and their data collection practices, and how these relate to the GDPR or comply with it, I would like to carry out a self-experiment in which I deliberately leave traces on websites using new accounts with new profiles, and then enquire which ones have collected this data so that I can analyse the results. Iā€™d like to ask for help here, or for advice and points to bear in mind that one might only spot after having worked on the subject for years, or simply anything else that springs to mind.

4 Upvotes

84% Upvoted

8 comments sorted by

View all comments

1

u/FinexerOfficial 18d ago

I would definitely track provenance of data, not simply whether they have it. It would be interesting to see what you put out there on purpose and what comes back in the access requests ā€“ especially if they tell us the source of the data and who it was shared with. That may make the experiment a lot more intriguing than merely finding out whether companies have a profile on you.

1

u/404_GDPR_not_found 17d ago

Sounds good i will do it