Wolfie Christl
@wchr.bsky.social
4.4K followers 320 following 350 posts
Public-interest researcher at Cracked Labs | Research fellow at Citizen Lab | Vienna, Austria | Tech and society. Tracking, surveillance, data economy, platform power, algorithmic decisions, datafication of work. wolfie.crackedlabs.org/en
Posts Media Videos Starter Packs
Pinned
wchr.bsky.social
The network technology giant Cisco offers to turn Wi-Fi access points installed in offices and other buildings into a system that tracks the location of employees, customers, smartphones, laptops and other devices for a wide range of purposes #workersurveillance

I took a deep dive ⬇️ [thread]
Reposted by Wolfie Christl
josephcox.bsky.social
New from 404 Media: ICE to buy tool that tracks locations of hundreds of millions of phones every day. Billions of pieces of location data. ICE previously stopped using data remotely harvested from smartphones. Now it's buying it again. Usually used w/o warrant
www.404media.co/ice-to-buy-t...
ICE to Buy Tool that Tracks Locations of Hundreds of Millions of Phones Every Day
Documents show that ICE has gone back on its decision to not use location data remotely harvested from peoples' phones. The database is updated every day with billions of pieces of location data.
www.404media.co
wchr.bsky.social
"Phones in the data could be tracked back to specific residential addresses after entering ... military bases, and Leinster House, as well as sensitive locations like health clinics"

Another media investigation into commercial mobile/app location data in Ireland:
www.rte.ie/news/primeti...
Security concern as tens of thousands of phone locations for sale
Data showing the specific movement of tens of thousands of smartphones in Ireland is available to purchase within the digital marketing and advertising industries, an undercover Prime Time investigati...
www.rte.ie
Reposted by Wolfie Christl
johnnyryan.bsky.social
If true, this update is astonishing.
The Commission climbed down from a planned break up of Google’s ad business to a mere fine, and then dropped even the fine for fear of offending Trump.

This is for market violations that have been proven in U.S. court.
wchr.bsky.social
"Algorithmisches Management via Smartphone. Digitale Steuerung und Kontrolle von Beschäftigten im Außendienst – von technischer Wartung bis mobile Pflege"

Die Studie gibts hier: crackedlabs.org/mobilearbeit
Algorithmisches Management via Smartphone
Digitale Steuerung und Kontrolle von Beschäftigten im Außendienst – von technischer Wartung bis mobile Pflege
crackedlabs.org
wchr.bsky.social
Kleiner Ö1-Beitrag über meine aktuelle Studie im Auftrag der @arbeiterkammer.at, es geht um Beschäftigtenüberwachung im Außendienst, Apps als digitale Peitsche und Stress im der Heimkrankenpflege. Irgendwann dann wieder mit weniger Wiener Dialekt ;)
oe1.orf.at/programm/202...
Überwacht vom digitalen Chef | MO | 01 09 2025 | 17:55
Wie Firmen ihre Außendienstmitarbeiter via App kontrollieren
oe1.orf.at
wchr.bsky.social
Langdon Winner (1997) on "cyberlibertarianism, a collection of ideas that links ecstatic enthusiasm for electronically mediated forms of living with radical, right wing libertarian ideas about the proper definition of freedom, social life, economics, and politics": dl.acm.org/doi/pdf/10.1...
wchr.bsky.social
Don't use Copilot für anything with numbers in Excel ,)
johannasa.bsky.social
Ah ja Copilot in Excel bitte nicht für dinge mit zahlen verwenden. 🙄

support.microsoft.com/en-us/office...
wchr.bsky.social
More than 40% of 543 data brokers registered under the California Consumer Privacy Act (CCPA) failed to respond to data access requests, "in an apparent violation of the CCPA".

"Consumer Beware!", the "first large-scale, systematic study of CCPA compliance": arxiv.org/pdf/2506.21914
wchr.bsky.social
I only know media reports (till now)
Reposted by Wolfie Christl
wchr.bsky.social
So, a German court said the German federal DPA cannot ban German government agencies from running FB pages (aka jointly processing data unlawfully for Meta's benefit), because whatever, and because only DPC Ireland, which hasn’t done anything relevant in years, could.
wchr.bsky.social
I was always against singling out public institutions, and I was always in favor of targeting Meta itself rather than joint controllers caught in broken digital infrastructure, but this is just another GDPR enforcement fail/farce.
wchr.bsky.social
So, a German court said the German federal DPA cannot ban German government agencies from running FB pages (aka jointly processing data unlawfully for Meta's benefit), because whatever, and because only DPC Ireland, which hasn’t done anything relevant in years, could.
Reposted by Wolfie Christl
komadori.bsky.social
Thread worth reading. The evidence and the enforcement options have been there for years, they've just been ignored.
wchr.bsky.social
After an on-site audit, the Berlin GDPR regulator found that Berlin-based location data broker Adsquare has been processing personal data unlawfully at scale, as disclosed in its annual report and confirmed to netzpolitik org:
www.datenschutz-berlin.de/jahresberich...
netzpolitik.org/2025/nach-un...
Reposted by Wolfie Christl
wchr.bsky.social
After an on-site audit, the Berlin GDPR regulator found that Berlin-based location data broker Adsquare has been processing personal data unlawfully at scale, as disclosed in its annual report and confirmed to netzpolitik org:
www.datenschutz-berlin.de/jahresberich...
netzpolitik.org/2025/nach-un...
wchr.bsky.social
Btw. in 2020, @johnnyryan.bsky.social and I sent a submission on Adsquare's claimed data exploitation from the RTB bid stream in digital advertising to the Irish GDPR regulator. Nothing happened...

www.iccl.ie/wp-content/u...
wchr.bsky.social
And I still think we need to introduce criminal liability for natural persons, i.e. executives and decision-makers, who are responsible for illegal personal data processing at scale.
wchr.bsky.social
Regulatory action should have happened years ago and included others in the data supply chain. But better late than never, I hope there will be a severe fine.

European DPAs really need to step up and recognize that TCF pseudo ‘consent’ to digital profiling by hundreds of firms just isn’t possible.
wchr.bsky.social
The list of potential GDPR violations, as disclosed in the Berlin GDPR regulator's annual report, is long and massive. In short, hundreds of millions of people often didn’t really ‘consent’ via the IAB’s TCF to Adsquare’s invasive data processing, making it unlawful.

* screenshots via G translate
wchr.bsky.social
I first came across Adsquare in 2018 and consider it a major node in EU/US consumer data brokerage, with links to shady actors who sold advertising data to military contractors.

After netzpolitik's 2023 reporting, the Berlin DPA started an investigation and is currently assessing a possible fine.
wchr.bsky.social
After an on-site audit, the Berlin GDPR regulator found that Berlin-based location data broker Adsquare has been processing personal data unlawfully at scale, as disclosed in its annual report and confirmed to netzpolitik org:
www.datenschutz-berlin.de/jahresberich...
netzpolitik.org/2025/nach-un...
Reposted by Wolfie Christl
couts.bsky.social
NEW: A data broker owned by major airlines sold domestic US flight data to DHS, telling the dept. not to disclose that, according to records obtained by @404media.co—copublished in partnership with @wired.com. No paywall bc FOIA @josephcox.bsky.social w/ the scoop: www.wired.com/story/airlin...
Airlines Don’t Want You to Know They Sold Your Flight Data to DHS
A contract obtained by 404 Media shows that an airline-owned data broker forbids the feds from revealing it sold them detailed passenger data.
www.wired.com