Oracle and Salesforce are facing GDPR class action lawsuits

The European non-profit privacy protection organization announced a GDPR lawsuit against Oracle and Salesforce, a leader in customer management systems.

The reason for the lawsuit was that the privacy protection organization discovered that Oracle and Salesforce monitored and collected personal data of Internet users through cross-site and cross-platform tracking strategies.

Oracle and Salesforce use such strategies to collect a large amount of Internet user information, and then sort the information before selling it to other companies for marketing use.

The problem is that the privacy protection organization believes that Oracle and Salesforce violate the General Data Protection Regulation because they have not stated their privacy policies and have not obtained consumer consent.

In accordance with the EU’s General Data Protection Regulations, when a service provider needs to collect user personal information, it must prompt and obtain user consent before collecting it.

If the user does not agree to the cookie collection strategy, the provider shall not collect and track it, otherwise, it will be considered a violation of the GDPR.

“Europe privacy law GDPR”by SmedersInternet is licensed under CC BY 2.0

The privacy protection organization said Oracle and Salesforce tracking scripts are widely used on Amazon, Booking, Dropbox, Reddit, and Spotify.

These tracking scripts and advertising platforms use a real-time bidding system to sell data for accurate advertising push, and these operations have not obtained the user’s active consent.

Non-profit organizations claim that everyone who has used the Internet is threatened. Although this tracking technology is difficult to detect, the potential harm is very large.

If the data collected from the Internet is not properly controlled, it can be used to promote highly targeted marketing that will market everyone.

For this reason, the non-profit organization announced that it would file a GDPR lawsuit against the two giants and seek compensation of up to 10 billion U.S. dollars. The Amsterdam court has accepted it.

Both Oracle and Salesforce simply stated that the above-mentioned prosecution had no evidence at all, and the company did not conduct any data collection activities that violated local laws and regulations.