What do we learn from the data of the GDPR information?

Due to the General Data Protection Regulation, all users have the right to receive information about the stored data. Of course, this also applies to technology companies such as Apple or Meta. We see what we really learn after the Apple analysis.

It’s hard to believe, but it’s still true: the European General Data Protection Regulation (GDPR) will soon be celebrating its fifth anniversary. Since May 25, 2018, the Europe-wide regulation for the protection of personal data has been in effect.

The legislators of the European Union have actually succeeded in creating greater awareness of their own information. It is true that many private individuals only use the GDPR as a threatening element.

Nevertheless, in this way, too, the uninhibited misuse of data by companies is literally put a stop to. In particular, the processing of name, age or gender for marketing purposes is being questioned by more and more people.

GDPR: Right to information: What do companies know about me?

The possibility of a right to information is actually particularly popular. Specifically, the right to information is Article 15 of the GDPR regulated. There it says:

The data subject has the right to request confirmation from the person responsible as to whether personal data relating to them are being processed; if this is the case, you have the right to information about this personal data and the following information. […]

The data that can be requested includes, for example, the processing purposes, the storage period of the data or the persons or recipients of your personal data.

Apple Analysis: What personal information does Apple hold about you?

In order to request GDPR information, an informal application is sufficient in most cases for small companies. A justification is not absolutely necessary. A simple email is enough.

In particular, large (US) corporations from the technology industry such as Apple, Google, WhatsApp, Facebook and Co. offer their users the opportunity to simply request the collected data via a kind of contact form.

We have already written detailed step-by-step instructions for the iPhone and iPad manufacturer Apple. After four days, Apple emailed us the requested personal information. But what can we learn from this Apple analysis?

Apple Analysis: Lots of data, little information

In fact, the value of the information received is only partially helpful or informative.

What is practical and commendable: Whoever requests the download of the deleted and taken pictures actually gets all the files compiled in a compressed folder. In our sample download, the one gigabyte ZIP file quickly grew to over 20 gigabytes of photos and videos.

On the other hand, the “Apple ID account and device information” is less helpful from the user’s perspective. Anyone hoping for concrete information in this case will be disappointed by Apple.

Instead of information that is easy to decipher, there is a series of Excel spreadsheets with lots of numbers, dates and little specific or helpful information. This applies in particular to technical laypeople – i.e. the majority of people with a smartphone.

The Apple analysis: A GDPR information that is not really helpful

All in all, the conclusion of our Apple analysis is mixed. Users only get real added value if they are willing to torment themselves through a series of very technical documents or if they have the time and technical know-how.

The promise of the European legislators for simple and complete information has at least only partially been fulfilled. Access to personal information is easy. However, the analysis or evaluation of the data obtained is more difficult.

Also interesting: