DPE-2026-0014

Geen werkende uitschakeling

De instelling die het verzamelen zou stoppen bestaat niet, of overleeft geen herstart.

Familie
Toestemming
Status
actief
Geldt voor
firmware, iot, vehicle, mobile-app

Wat er gebeurt

A device or application collects data with no control to prevent it, or with a control that resets on update, on reboot or after a period, so the collection resumes without the owner doing anything.

Waarom het ertoe doet

Consent that cannot be withdrawn is not consent. On a device this bites harder than on a website, because the owner cannot walk away from something they paid for and installed in their home or their car.

Veelvoorkomende oorzaken

  • setting absent from the interface entirely
  • preference stored in volatile configuration and lost on firmware update
  • regional default reapplied after an update

Dit is het níet

If a control exists and holds, this entry does not apply, however buried the control is. The distinguishing feature is that it is missing or does not survive.

Hoe je het vaststelt

Indicator

Collection continues after the control is set to off, or the control returns to on after a reboot or update, established by capturing before and after.

Methode

differential

Kwaliteit van de detectie

97 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The control exists elsewhere, for instance in a companion app or a web interface.met de hand te toetsende bevinding vervalt
  • The remaining traffic is strictly necessary to operate the device.met de hand te toetsende bevinding krijgt een ander patroon
  • The reset was caused by a factory reset performed during testing.met de hand te toetsende bevinding vervalt

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualrepro/DPE-2026-0014/MANUAL.mdidentical outbound traffic with the control on and off, or the control reverting after a reboot

Juridisch kader

Bepalingen

eu-gdpr-6-1-a

Veelgehoorde tegenwerpingen

The device cannot function without it.

Then say so, and establish it. Necessity is a claim that can be tested by disabling the traffic and seeing what stops working.

Geldt wanneer

to-processing

Verwante patronen

← alle patronen