this post was submitted on 02 Mar 2026
509 points (97.9% liked)
Technology
82151 readers
4456 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It says that OS developers must track users or be fined, so they will track users.
The statute does not define:
What counts as "minimum"
How necessity is measured
Whether "minimum" refers to data fields, granularity, frequency, or retention
Whether metadata (e.g., device ID, timestamp, API call logs) is included or excluded
This legislature calls App Providers and developers to track people and barely even gives lipservice to what is allowed.
We don't want our OS's tied to our identities. This does not explicitly forbid that
Read the law (its barely 1000 words) because your claims are not substantiated by it.
I already read it. That's how i came up with what I wrote man.
You go re-read it and tell me
What counts as “minimum”
How necessity is measured
Whether “minimum” refers to data fields, granularity, frequency, or retention
They don't cover shit about ANY of that.
It literally explains the minimum as asking the user for their age, DOB, or both. It then says delopers may not ask for more than the minimum data.
Further, the law states that if a developer intentionally breaches any part of the law (which would include the requirements) there is a $7500 fine per impacted user, and injunctions. Accidental breaches are $2500 per user, and injuctions. These are very high penalties in context - someone like Microsoft would be on the hook for trillions, and as such, corpos will not be rushing to play fools and test the law by asking more than the bare minimum.
If this is confusing then please seek out one of the many legal blogs/videos covering it by lawyers because I can't break it down further than I already have.