People are being forced to sign agreements which jeopardise the natural rights to their data which they would otherwise have.
One example: a friend who has a very pretty daughter was asked by her school to give them the right to film her and to use any and all such recordings as they see fit for 50 years even after she leaves the school.
This feels very wrong on just about all the conceivable levels.
(note that privacy and GDPR issues apply differently for children)
> natural rights to their data which they would otherwise have
This is not a thing. Data has traditionally "belonged" to the entity doing the recording of the data.
Talking about GDPR, the fact they had to ask is proof it works. It’s an opt in. Your friend now has the option to say yes if they want to share it, but the default is no.
There are also provisions for withdrawing consent after giving it. The agreement can’t go above that law.
Suppose she in later life becomes a Hollywood star and her school starts selling these recordings of her on the internet because, after all, her father has given them a permission to do this for fifty years ahead?
So GDPR helps you in maintaining control over your data as you see fit.
Consent could be withdrawn before or after GDPR. My guess is that the school have realised they're at risk of having to reprint all their promotional materials if consent is withdrawn.
So they need a contract, a model release. They needed that before GDPR. If you don't like the terms, don't sign it.
This actually made me chuckle a little. I genuinely have no idea if you're joking here because this sentence is ridiculous.
Additionally consent must be "freely given". If you would be punished (e.g. expelled from school) then you haven't given consent, so they can't use it.
From the above "school might have to reprint all its publicity materials if consent is withdrawn" it is clear that this would be viewed as being antagonistic towards the school and its interests.
The force is of purely psychological nature, of course: "surely, you don't want to cause problems to your school?"
That's a good point, and there might be a court case about that. I agree that the parent probably doesn't have enough free choice. If the law was to say "That isn't freely given", then the school doesn't have consent, so they can't use the images!. That's the beauty of it. It's a different legal viewpoint than "signed contract uber alles". DPA should look at if you had real consent.
> it is clear that this would be viewed as being antagonistic towards the school and its interests.
Good? The whole point of the GDPR & EU data protection law is to push the pendulum the other way, because it's gone too far. If someone can come up and force them to reprint everything, and then someone else force them to reprint everything, well maybe they should collect less personal data? If they didn't collect personal data, they wouldn't have this risk. EU law is trying to discourage massive data collection.