EPIC’s researchers had been unable to find an opt-out course of in any respect on Meta, X, OpenAI, and Tinder with out first logging in. And HireVue and the surveillance vendor DataTrust body their opt-out directions as out there solely to California residents, despite the fact that 20 different states have handed legal guidelines granting opt-out rights.
Palantir, the protection and intelligence contractor, supplies a privateness type on its web site however doesn’t embrace an choice to decide out of the sale or sharing of non-public knowledge—the identical discovering EPIC documented for TikTok, Amazon, and the gunfire-detection vendor SoundThinking. Palantir additionally doesn’t clearly hyperlink the shape from its homepage or its privateness coverage, and the researchers had been unable to find any opt-out course of on Palantir’s website, Meta, X, OpenAI, or Tinder with out logging in first.
Amazon disputed the discovering. Adam Montgomery, an organization spokesperson, says that Amazon doesn’t promote buyer private info, and subsequently prospects are opted out by default. Decide-out choices for knowledge sharing can be found by its “Your Ads Privacy Choices” and “Advertising Preferences” pages, and thru privateness settings on most Amazon gadgets. Montgomery says Amazon doesn’t use the phrase “share” in its opt-out choices, however mentioned the choices cowl the identical makes use of outlined by relevant regulation.
Shane Bauer, a spokesperson for OpenAI, says the corporate doesn’t promote consumer knowledge, although it does acknowledge sharing restricted knowledge with advertising and marketing companions for focused and cross-context behavioral promoting. “We give individuals easy methods to regulate how their knowledge is used immediately in our apps, so these decisions are simple to make proper the place individuals are utilizing our companies,” Bauer says. “Our Privacy Portal is one other approach for individuals to submit privateness requests, together with people who don’t have an OpenAI account however nonetheless wish to train their privateness rights. We predict giving customers a number of methods to train their rights is an effective factor.”
Jackie Quintana, a HireVue spokesperson, disputes EPIC’s findings on scope, saying the corporate’s public privateness coverage applies solely to individuals who go to its advertising and marketing web site, to not job candidates, whose knowledge is processed by HireVue’s HR platform underneath consent controls configured by every employer. The corporate didn’t tackle EPIC’s discovering that its public-facing coverage directs opt-out directions solely to California residents.
John Fisher, a spokesperson for SoundThinking, says the corporate’s opt-out types might be discovered on the backside of its privacy policy pagetogether with a buyer assist telephone quantity.
Google, Meta, Spokeo, Whitepages, Nationwide Public Knowledge, Bumble, X, DataTrust, Palantir, TikTok, didn’t reply to requests for remark. Tinder acknowledged the inquiry however didn’t instantly present an announcement.
“Customers can’t successfully defend their very own privateness by exercising opt-out rights,” EPIC says. Even a wonderfully designed course of—no buried hyperlinks, no preselected toggles, no paywalls—would nonetheless require individuals to search out and submit a request to each firm that holds, sells, or transfers their knowledge. The actual treatment, EPIC concludes, shouldn’t be higher types however less collection: guidelines that bar firms from gathering private info they by no means wanted within the first place.
