I asked them in writing. It will be interesting to see if they comply.
To be clear, the purpose of the post is to understand the law (the forum being !law_us) because I want to fix this problem for everyone not just myself. I believe these digital rights abuses are so rampant because so few people step up to the plate to fix the problem for everyone. Most people just pragmatically fix the problem for themselves and move on. I want to understand the law to get an idea of the legal actionablity so that I can work out whether I have a pathway to force the CU to make their workflow with all customers legally compliant -- which would be a process I can recycle with other similar data abusers (other banks).
I blame Taylor Swift, telling people to “shake, shake, shake it off…” instead of fighting back.
It’s not a binary statement. it’s a measure of proportions. So my statement was factually correct. Cloudflared banks are quite rare in Western Europe, for example. I actually cannot think of any off the top of my head. Step into the US, and credit unions are mostly pawned by Cloudflare. It’s a shit show. Hard to find non-Cloudflared CUs, which is an artifact of shoestring-budget funding.
I heard someone talking about a European bank that was considering using Cloudflare and it was met with protest. The bank backed off the idea. In the US people don’t give a shit.. they don’t even notice. There’s a bit more blind trust for big corps.