Take-Aways (AI)
- Only collect a minimal amount of personal data, delete it as quickly as possible or anonymize it so that results cannot be traced back to individuals.
- Do not use non-public data; users must be informed about monitoring or be able to recognize this from the circumstances.
Overview of the FDPIC on data protection-compliant social media monitoring:
The FDPIC recommends that the following points in particular be observed for the data protection-compliant use of social media monitoring:
- When information is collected by means of social media monitoring, personal data is inevitably processed. However, this must be limited to the minimum necessary for the evaluation purposes and deleted or made anonymous as quickly as possible.
- The results of the monitoring must therefore no longer allow any conclusions to be drawn about individuals.
Non-public data (especially from closed user groups or circles of friends) may not be included.- Members of social media platforms must be informed that monitoring tools are being used today, or at least be able to tell from the circumstances.
- Processing of which the data subject has not been informed or which is not evident from the circumstances may not be carried out.
Source: FDPIC – Data protection-compliant social media monitoring