But then it mishandled user data, so the EU had to fine it for $5.4 million, as AndroidHeadlines reports. Oops?
The European Union spent a long time arranging the specifics of how companies of all shapes and sizes are to handle user data. We won’t bore you with the specifics, but the requirements are hefty and ranging from where the data should be handled to how it should be stored.
This, of course, is regarding the type of data that can be associated with an individual in order to recognise them as a person. When not handled correctly, this GDPR data may be used for nasty things like mass marketing or scams, so it is actually an important topic.
That’s right, kids, Spotify was around way back when most of us were using over-ear headphones too!
The fine in question comes from the Swedish Authority for Privacy Protection and is based on a complaint from way back in 2019. Talk about a blast from the past! It turns out that at one point, Spotify failed to provide customer data upon request, which is part of a user’s rights as per EU regulations.
But then it gets even better worse: Spotify failed to explain how they were using the data in question, which raised tons of concerns. And for context: this isn’t anything weird for the EU. When a company fails to give a good reason why it needs a certain type of data, a lot of EU citizens will be eager to pursue their rights.
In addition to the fine, Spotify is expected to present the complete set of requested data to the individual who submitted the complaint — even though at this point years have passed — along with the written process for data handling.
The Swedish PDA’s investigation concluded on the bright side, as it found that Spotify is doing things properly. That, however, won’t save the company from the aforementioned fine, so Spotify responded with intent to appeal this decision in the future.
