A social platform’s default privacy settings make new user profiles publicly visible worldwide without any affirmative user choice. Which GDPR default-protection critique is strongest?
Select an answer to reveal the explanation.
Short Explanation
Shipping every new profile as a billboard until someone hunts for a lock is the opposite of privacy by default. Defaults should start narrow; users can open the curtains later if they want. ‘Settings exist somewhere’ does not rescue a public-by-default launch.
Full Explanation
Article 25(2) requires that by default only personal data which are necessary for each specific purpose are processed, covering amount of data, extent of processing, storage period, and accessibility. Public accessibility of profiles without user intervention is a classic accessibility-default failure. Later user self-help does not cure non-compliant defaults. The duty is not limited to special-category data.