Bonum Certa Men Certa

Open Source Initiative (OSI) Privacy Fiasco in Detail: Seeking Class Action Against the OSI

posted by Roy Schestowitz on Apr 09, 2025

Coffee Beans On Weighing Scales

IN THE introduction and the following two parts we gave sufficient background for people who are not familiar with this fiasco. The previous part showed parts of the complaint (as a PDF) and today we show more.

There is a "LETTER SEEKING CLASS ACTION REPRESENTATION". To quote the complainant:

Please note, I did not reach out to OSI about this release of my personal information after realizing it was still showing by shared 3rd party after 4 years. This does not affect my complaint case. I did, however, contact a LA privacy lawyer the other day:

I was contacted by someone on LinkedIn who had my information from when I was a member and voted in 2021 at the open source initiative. This corporate organization is located in West Hollywood California and upon further investigation I came to see that the third-party vendor, Helios that performed the election

Still had the list of 589 members showing publicly on the web. The open source initiative didn’t even know how the list of names was released at the beginning, and even after filing a notice to the community that there was no breach, the list still remains publicly available.

There was an expectation of privacy and certainly after four years, so I filed a complaint with the CPPA.

This organization (OSI) is the “steward" of our open source definition yet can’t even keep our information private. Like I said there was an expectation of privacy and four year seems like quite a bit of time.

There are 589 names on that list and I really believe that this release of our names and whether we voted or not, is negligent.

As a free software advocate, having affiliation with the open source initiative could do serious harm to my reputation.

Additionally, not protecting our privacy for this long is truly distressing.

I would like to be represented in a class action against the open source initiative based on their failure to protect my privacy. If a class action is not possible a single action is also something I am open to. However, almost 600 people were exposed and for four years.

Thank you.

Complaint to CPPA (response via email):

Letter sent via email

RE: Privacy complaint about Open Source Initiatives: A California corporation Helios: Third party vendor used by the Open Source Initiative for elections. Deb Nicholson, previous Interim Director and current director - Stefano Mafulli as well as their IT staff and those working/volunteering at OSI who may also be held accountable for this neglect of private data.

Dear [redacted]:

Thank you for submitting a complaint to the California Privacy Protection Agency (“Agency”).

Complaints are important for our enforcement efforts. We will retain the information you provided in our files and may contact you if we need additional information, for example to request additional facts about the complaint. No further action is required from you at this time. Investigations are generally confidential unless and until a matter becomes public through an enforcement action. For more information about the law and answers to frequently asked questions, please see https://cppa.ca.gov/faq.html.

Please note that we cannot represent you, advocate for you with the business, or force the business to satisfy individual requests for relief. If you would like to consult an attorney, you can obtain a referral to a certified lawyer referral service through the California State Bar at (866) 442-2529 (toll-free in California) or (415) 538-2250 (from outside California), or online at https://www.calbar.ca.gov. If you cannot afford to pay an attorney, contact your local legal aid office to see if you qualify for free or reduced-rate legal assistance. For a referral to local legal aid offices, visit https://lawhelpca.org/ and click on the Search for Legal Help tab.

Thank you again for contacting the Agency about this matter.

Sincerely,

CALIFORNIA PRIVACY PROTECTION AGENCY Complaints Unit

The complainant did not ask the OSI or self-identify; that's the correct approach because the OSI tends to defame critics and censor/deplatform them.

Other Recent Techrights' Posts

These Feet Are Made for Walking
Humans are apparently so very clever that they decided to form a "progressive" consensus: feet no more
OFTC Has Just Culled About a Third of Its Online Users
It's not the first time they purge or force offline many people/bots
Central Staff Committee of the EPO Opposes Abuses Against EPO Staff, Challenging SuccessFactors Stunts
Europe became institutionally colonised
Gemini Links 22/05/2025: "Conspirituality" and Visiting One's Old University
Links for the day
Microsoft Killed the Term "Open Source" (by Bribing/Taking Over OSI, 'Linux' Foundation Etc.) and Now It Needs to Kill the Brand Linux (Because Windows Just Won't Run!)
Why else would Microsoft falsely describe Windows as "Linux" and "Open Source"?
Slopwatch: Liars for Microsoft, Plagiarism, and IBM Red Hat Markets Slop as "AI"
Today was a bad day news-wise
 
Why We'll Continue Covering EPO Abuses (Other Patent Offices as Well, as the Need Arises) for Many Years to Come
We're basically becoming Russia
Links 22/05/2025: TikTok Laying Off Again, Microsoft-Backed Builder.ai Set for Bankruptcy, Scam Altman Uses 'Funny Money' to 'Buy' (Hire) Company
Links for the day
We Seem to Have Abandoned Science and Replaced Sound Policy With Private Patent Shareholders and College Dropouts Like Bill Espteingate
Because of what they did there are now many people out there who reject all vaccines
The Evolution of Microsoft's War on GNU/Linux
13 sins
My New Desk Arrangement (and More Breaks From the Keyboard)
all in all yesterday I devoted 4-5 hours to redoing and shuffling stuff
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, May 21, 2025
IRC logs for Wednesday, May 21, 2025
Bigots and Lunatics Who Attack Microsoft Critics, Projecting Their Own Bigotry by Accusing Others of Imaginary Things (Which They're Innocent Of)
"In psychology, projection refers to assigning your negative traits or unwanted emotions to others without being aware you’re doing it."
"The Appeals Committee [at the EPO] Unanimously Stated a Formal Flaw in the Consultation of the General Consultative Committee (GCC) on the Reform"
It's a truly horrifying situation
Links 21/05/2025: Climate Problems and Ceasefires No Longer Foreseen
Links for the day
Gemini Links 21/05/2025: "Shrimps of Doom" and "ASCII-graphs"
Links for the day
Links 21/05/2025: GitHub Becoming Slop, MElon as a Drug Addict Considered National Security Risk
Links for the day
Slopwatch: Slopfarms 'Think' Redis is "Linux" (RedisRaider)
Today we'll keep it short and to the point again
IBM Has Allegedly Just Sacked Mr. McKinsey (McK), Clay Cowan, Its Fourth CMO in a Few Years
To insiders he represented the company that's killing IBM or advising IBM on how to self-destruct
Gemini Links 21/05/2025: Trips, 4D Golf, and Writing Software
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, May 20, 2025
IRC logs for Tuesday, May 20, 2025
Links 20/05/2025: Biden's Cancer, GDPR Changes, and UK Defamation Cases (or SLAPPs) Fail Again
Links for the day
Microsofters Targeting the Wife of the Critic of Microsoft
false claims and loaded statement
Links 20/05/2025: "Bankrupt 23andMe Just Sold Off All Your DNA Data" and "Free Speech Warriors" MIA
Links for the day
Microsoft a Top Sponsor at Red Hat Summit (IBM Selling Proprietary Spyware and Back Doors in a "Red" Trench Coat)
They both work for Microsoft
Openwashing of Windows, Back Doors, Persistent Surveillance, Keyloggers, Screen Loggers, DRM and So On
WSL is not "Linux", it's Windows
New 'Interview' With - or Talk Coverage of - Richard Stallman in the European Union
automated English translation
IBM Mass Redundancies Likely This Coming Thursday
We're not in a position to judge if that's true or false
Gemini Links 20/05/2025: LLM Scraper Bots in Gopher and "Starmer and the Somewheres"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, May 19, 2025
IRC logs for Monday, May 19, 2025