Dutch suicide prevention website shares data with tech companies without consent
A Dutch suicide prevention website was found to be sharing visitor data with tech companies via tools like Google Analytics, apparently even when users did not consent, raising concerns about violations of EU GDPR rules and the privacy of highly vulnerable people. Commenters debate whether this stems from malice or widespread ignorance and inertia around “default” analytics tooling, especially when marketing drives decisions without security input. The incident feeds into broader worries about surveillance capitalism, data brokerage, and whether people in mental health crisis can safely use online or phone-based support services without long-term consequences.
Privacy, GDPR, and Sensitivity of Context
- Many see the use of Google Analytics, Microsoft tools, and session‑recording (“screen recordings”) on a suicide‑prevention site as a severe privacy violation, especially for highly vulnerable users.
- Several note that collecting data without valid consent likely violates GDPR, with extra concern because contact with a suicide hotline can be considered medical data.
- Some emphasize that even if only “analytics” data is shared, the context (suicidality) makes it qualitatively different and more harmful.
Incompetence vs. Malice
- A recurring theme: this is more likely ignorance, apathy, and “default choices” than intentional malice.
- Typical workflow described: someone asks for visitor metrics, developers or marketers reflexively add Google Analytics or other standard trackers without revisiting assumptions.
- Others argue that when lives and sensitive data are involved, “incompetence shaped like malice” should be treated just as seriously.
Ubiquity of Third‑Party Analytics
- Multiple comments describe GA as “industry standard,” especially driven by marketing, with IT or security often excluded from decisions.
- Some push hard for self‑hosted or privacy‑preserving analytics, saying big‑tech defaults amount to bartering user data for free tools.
- A minority plays down the headline as “just GA,” while others say that alone is already outrageous in this context.
Trust, Surveillance Capitalism, and Avoidance
- Several express broad distrust of any website, app, or cloud service handling sensitive data, citing data brokers, telecom leaks, and weak security.
- Some say they now avoid suicide sites or hotlines (or most networked tech) because any interaction may become a permanent, exploitable record.
Effectiveness and Role of Hotlines
- Thread branches into debate over suicide hotlines generally:
- Cited research claims 988 is linked to ~11% youth suicide reduction; many view hotlines as a valuable “band-aid” that clearly saves lives.
- Others describe negative or useless personal experiences and see hotlines as a minimalist, “CYA” response that doesn’t address root societal causes (isolation, economic precarity, stigma).
- There is concern that fear of involuntary committal, loss of rights (e.g., gun ownership), stigma, and long‑term records deters some from seeking help.
Regulation and Enforcement
- Some argue EU laws and DPAs are a strength—this case came to light and tools were suspended after scrutiny.
- Others say enforcement is too weak and call for criminal liability for organizations and data protection officers to change incentives.