Cricut’s Design Space enforces automatic cloud syncing of user files, even those stored “locally.” This raises serious GDPR concerns, especially when files contain personal data like client details, addresses, or sensitive info, undermining user control and privacy.
What steps can we take to push Cricut toward GDPR compliance and respectful data handling? Would regulatory complaints or organized campaigns for local-only storage options make a difference?
Looking forward to your thoughts and strategies!
Thank you for your valuable insights! I agree that complaints, legal claims and boycotts are valid approaches to push for accountability.
Online accounts are not part of the primary purpose of acquiring the device. When purchasing a vinyl cutter or printer, users do not initially agree to a software license which is enforced later on with changing terms over time. Additionally, SVG files created with Cricut are expected to contain private information about third parties, such as addresses and messages, since the tool is designed for creating personalized items like cards and invitations. This raises serious data privacy concerns, as those individuals have not consented to their data being processed by Cricut, violating GDPR principles related to consent and purpose limitation.