Comment

Comment on Valve emailed about a cyberattack against their shipping partner CEVA Logistics in Europe

Most likely due to GDPR requirements. Depending on the type of data, companies are legally required to retain some or all of it for anywhere between 3 and 12 months, if I remember correctly.

You know, in case you ever turn your Steam Deck into a bomb - they’ll be able to track it to you. Think twice.

source

Sort:hotnew top

soulsource@discuss.tchncs.de ⁨3⁩ ⁨days⁩ ago
This sounds pretty much like the opposite of what the GDPR aims for.

IANAL, but as I understand Article 5(1)(e), shipping companies need to give good reasons why they would be storing data after they have delivered the package:

Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’)

My best guess is for handling of complaints. Like, people receive the package, but only open it some time later, just to realize that the contents have been damaged during transport.

source