#and figured. hey my personal health info is maybe sensitive data i should check the privacy thingy

[mordcore]

the EU has strict laws about data safety and privacy that applies to all companies doing business in the EU :D

but they decided to make exceptions for american companies and let them send our data overseas D:

but only if they are certified to be safe! i can't find out what the criteria for cetification are but.. you can trust the certification because the EU said so! :D

as for the american national intelligence agencies, they're allowed to take the data if it is conssidered "reasonable" D:

but they established a court called the Data Protection Review Court which can review the usa national intelligence activities and order them to delete data if they rule that it was not justified to get! :D

but the court is an american court and thus subject to american corruption and the political power of the nsa and cia to do whatever the fuck they want. D:

(also not like an order to delete data would bother them much since they can just lie and say that they did. not like anyone can actually check.)

basically: DSGVO is very nice but it won't help you if the company is american. or uses american services, such as google, for account creation for example. which most apps do. :/