English 中文(简体)
Privacy Policy of Google DialogFlow? (GDPR)
原标题:

I was unable to find the answers on the dialogflow/google terms of use/privacy statement, so I ask here:

  • Are all the Dialogflow API Servers located in the EU - i.e. do GDPR Rules apply here?
  • is there a comprehensive information available which data and how it is processed within the DialogFlow API (wrt data protection)? (This would be needed in order to inform our users of our ChatBot about their data usage here... At least, we have to follow GDPR.)

Thanks!

问题回答

Where the API servers are has no bearing on GDPR. What matters are where the users are that it is storing data about; if they may be in the EU, the GDPR applies, i.e. it probably does.

The applicable Dialogflow T&Cs seem to be here. It doesn t appear to list what dialogflow stores or processes specifically, but it says it incorporates Google s general API terms, which in turn link to Google s overall privacy policy, which should tell you what you need.

When dealing with any US-based company (such as Google) that may handle EU personal data, you should check that they are registered with the Privacy Shield scheme, which (not surprisingly) Google is. That should mean you re largely compliant (subject to what data you are collecting and on what grounds), but have a contingency plan for what happens if Privacy Shield collapses, which is entirely possible and fairly likely.

Where the API servers are, make a huge difference.

I think that any Google services transfer personal data outside the EEA (i.e.: the IP address is a personal data). The Privacy Shield is no longer sufficient for GDPR compliance. Therefore, it might be important to consider what happened with Google Analytics recently.

Currently, Google Analytics is not GDPR compliant, and cannot be compliant as long as personal data are not retained in the European Economic Area or other countries whitelisted by European authorities.

As of today, Austria, Denmark, Finland, France, Italy, and Norway Data Protection Authorities have taken a stance against Google Analytics.

You can read more details at the following weblinks:





相关问题
Privacy Policy of Google DialogFlow? (GDPR)

I was unable to find the answers on the dialogflow/google terms of use/privacy statement, so I ask here: Are all the Dialogflow API Servers located in the EU - i.e. do GDPR Rules apply here? is there ...

How to have a policy class implement a virtual function?

I m trying to design a policy-based class, where a certain interface is implemented by the policy itself, so the class derives from the policy, which itself is a template (I got this kind of thinking ...

Java RMI - Socket Permission issues

I m having problems trying to connect my java program to 2 different sockets. Basically I want to initialise my RMI Server (connecting to port 1099) and then also initialise PrologBeans on port 10002. ...

How do you add user account policies programmatically?

I was using the APIs NetUserAdd and NetUserSetGroups to add a user account and associate it with a group to a computer. Not much later I found an example capable of doing the same thing (adding a user,...

Separate policy from mechanism: What does it mean?

I ve often heard the mantra of "separating policy from mechanism", especially in the context of the Unix philosopy. What does this mean and what are some concrete examples of it? When/why is/isn t ...

security exception when loading web image in jar

I am trying to create a java jar Applet that will run in a browser, download an image from a URL, and display it to the user. My implementation is: try { String imageURL = "http://www.google.com/...

热门标签