Tweet · 28 Apr 2022, 18:54 UTC

Replying to @PrivaCat and @floorter, @montezumachavez, @JBAGerritsen, @PrivacyAcademyB, @MissIG_Geek, @peterhense

No, but I mean it. In almost every single case that I've seen involving more than one controller, it wasn't justified. Companies do it because they want to be reusing the data in ways that they shouldn't. Baseline forbid it, then enable a few rare exemptions.