In a recent case involving a user, it has been questioned whether Amazon records users' conversations through its voice assistants, beyond the instructions given to the devices. This user detected conversations in the recordings that were not related to the activation of the devices. How should these recordings be handled under current data protection law?
Ingrid González, manager in the area of data protection, explains in Infoveritas that "privacy by default" should be applied, i.e. "implement appropriate technical and organizational measures to ensure that, by default, only personal data that are necessary for each of the specific purposes are processed". And this includes: "all personal data collected, the extent of the processing, their storage period and their accessibility".
How can the misuse of these recordings be prevented, according to our privacy lawyer? "By not consenting to the recording of our conversations, by not allowing them to be saved in the cloud or by periodically deleting the saved information".
If there is an unlawful use of these recordings, she adds that "you can operate in several ways: report it to the AEPD, initiate civil proceedings or initiate criminal proceedings if the treatment that has been done by cybercriminals has involved a criminal offense".
If you would like further information, please do not hesitate to contact our office by calling 91.345.48.25 or sending an email to info@cecamagan.com