<story><title>Microsoft .Net Core telemetry is not opt-in</title><url>https://github.com/dotnet/cli/issues/3093#issuecomment-392663561</url></story><parent_chain></parent_chain><comment><author>dnomad</author><text>It boggles the mind that a bunch of very smart people at Microsoft thought this was a good idea. Say what you will about Oracle but Java has never been malware that continuously spies on users. Unfortunately the GDPR explicitly allows this kind of IoT-style ubiquitous anonymized monitoring: as long as the information cannot be tied back to an individual person (meaning no IP addresses but GUIDs are fine) and the business can claim a legitimate business interest they&amp;#x27;re likely to get away with it. This sort of ubiquitous monitoring is only going to get more popular. In Hong Kong we&amp;#x27;re seeing new Condo apartments that have full-fledged &amp;quot;internal sensor grids&amp;quot; a la Star Trek (as it was described to me). In theory though the data collection firm (which is not the same firm that owns the building) has no way of correlating it back to a specific person&amp;#x2F;apartment number.</text></comment>
<story><title>Microsoft .Net Core telemetry is not opt-in</title><url>https://github.com/dotnet/cli/issues/3093#issuecomment-392663561</url></story><parent_chain></parent_chain><comment><author>yummybear</author><text>.NET Core does not &amp;quot;violate&amp;quot; GDPR any more than Google Analytics does, or any other system that receives data. It&amp;#x27;s up to the data controller to ensure that no personal data is sent, which is done by setting the environment variable DOTNET_CLI_TELEMETRY_OPTOUT.&lt;p&gt;There are fair arguments against the nature of opt-in telemetry, but saying &amp;quot;they violate GDPR&amp;quot; is just hyperbole, imo.</text></comment>