Just got my data from Spotify that I requested.
1.1MB of data that should contain 10 years of usage does not seem right at all.

I have seen other that have gotten their information, and it container every from the brands of their headphones to what voicecommand was used to play a song.

My report did not contain any of that.

@iKameo

If they did, they are breaking GDPR.

I did it by the form on the website

Maybe you can get more when sending some official letter?

Or you're just not using it in a way so they can get informations about you.

@iKameo why it shouldn’t be legal? They’re not obligated (by GDPR) to keep any stats...

@mlask

But they are obligated to give all information they have about me, which they did not.

Is this applicable from people that are from Europe but not in EU?

@aldoblack
Only EU

@rmrfHead yeah I done that for a contract before gdpr came into effect, being on the other side made me realise how stupid the whole thing is. Why make something you can't enforce? Smh

@Linux yeah, they are obligated to give you all the information but they said they did. So what next? A full fledged investigation? Nope, the only way is for you to prove that they have information about you outside of what they had. Even if they have every voice command you've ever used, its compliant if they're not able link them back to you but again, who can prove otherwise?

Its dumb, the main idea of GDPR, what they tried to do, is say "Stop fucking using people's data when you don't need to. THINK! Dumb fucks". But by making it so strict, they now have to enforce something you can never prove smh.

All you have to do is don't contact someone who said not to and you're golden smh.

@CodeBane

Other people have gotten alot more information like:

Phone Brand

Brand of headphone

Timestamp of when voicecommand was give

What was said in a voicecommand

Also, where do they store the information regarding the "year in review" they always do?

@Linux Those are the types of questions that can prove they have otherwise but tbh, they could just say your particular profile due to whatever settings, types of phone you were using, blah blah blah, they weren't able to retrieve that information for you. Poor data collection isn't a crime afaik.

You'd have to prove they have other information, for example if you can see data on your profile that they never gave you then you could argue them withholding information that they can't make an excuse about.

To quote a client when asked to share the data

"What data"

*Ahem*
rm -rf *.*