Live data from Hacker News

Tech Giants Brace for Europe’s New Data Privacy Rules

nytimes.com

11–20 of 55 posts

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#11

Good time to be a contractor who knows about GDPR compliance

In what way? Genuinely curious - what sort of technical work needs to be done that requires actually knowing the regulation? I'm asking because I got my law degree with the idea that I would combine tech skills with knowledge of the law, but I never really found an angle to make that work.

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#12
post #2

> If companies do not comply, they could face fines totaling 4 percent of their annual revenue. I am curious on how did they arrive at the 4% cap?

I'm just glad it is based on revenue instead of profits. I think corporate taxes should be the same way. I imagine the four percent had to be large enough to motivate compliance without scaring people away and further fueling anti-EU sentiment? I'm just speculating.

What anti-EU sentiment? The only anti-EU sentiment inside the EU comes from populist politicians and the people who vote for them, who have no idea how the EU works. And what non-EU entities think is, frankly, irrelevant.

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#13
post #11

Good time to be a contractor who knows about GDPR compliance

In what way? Genuinely curious - what sort of technical work needs to be done that requires actually knowing the regulation? I'm asking because I got my law degree with the idea that I would combine tech skills with knowledge of the law, but I never really found an angle to make that work.

Sounds like with your two skillsets, compliance and/or internal audit would be a good job for you. These jobs often rely on reading legal-ish documents such as HIPAA, PCI, and GDPR and interpreting them for your company's unique situation, then either overseeing the implementation of IT policies or actually implementing the IT policies yourself to control the IT systems appropriately.

With internal audit you're generally overseeing the compliance folks (from a distance), as a compliance person you're more often implementing the technology yourself. Another role to look into is risk management. All of them are a small step back from "hard" IT like sysadmin or programming and getting more into the people and process side of the IT house.

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#14
post #11

Good time to be a contractor who knows about GDPR compliance

In what way? Genuinely curious - what sort of technical work needs to be done that requires actually knowing the regulation? I'm asking because I got my law degree with the idea that I would combine tech skills with knowledge of the law, but I never really found an angle to make that work.

In the UK a consultant with a moderate amount of experience and a GDPR Practitioner qualification can make between £500 and £800 a day in the City. That kind of work is largely going to be working as part of a team to survey the policy and process landscape of the organisation and suggest/make changes in accordance with the changes in the law.

But with regards to your point about having a law degree - I'm not sure where you're based but a qualified solicitor with a specialism in cyber law and data protection here in the UK will be set for a while. The GDPR enforcement date is a cash cow for consultants, but for lawyers this is just the beginning.

Edit: After seeing what freehunter posted at the same time as me - If you don't want to go through the hassle of becoming a qualified solicitor, then compliance is definitely a way to go. GDPR sets out a requirement for organisations to employ 'Data Protection Officers' so if compliance/risk management is of interest to you then the compliance ladder is pretty solid.

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#15

Earlier quoted context omitted.

I'm just glad it is based on revenue instead of profits. I think corporate taxes should be the same way. I imagine the four percent had to be large enough to motivate compliance without scaring people away and further fueling anti-EU sentiment? I'm just speculating.

What anti-EU sentiment? The only anti-EU sentiment inside the EU comes from populist politicians and the people who vote for them, who have no idea how the EU works. And what non-EU entities think is, frankly, irrelevant.

>What anti-EU sentiment?

Allow me to introduce you to https://en.wikipedia.org/wiki/Brexit

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#16
post #11

Good time to be a contractor who knows about GDPR compliance

In what way? Genuinely curious - what sort of technical work needs to be done that requires actually knowing the regulation? I'm asking because I got my law degree with the idea that I would combine tech skills with knowledge of the law, but I never really found an angle to make that work.

Reviewing systems and business processes to ensure compliance, specifying internal workflows to meet requirements, and all sorts!

It's not just GDPR, but lots of other EU regulations this year that are having large impacts on tech systems (e.g. in the financial world), and being across those is valuable.

Perhaps you won't get your hands dirty on actual code, but technical implementation of regulation is a lucrative field (or, at least, this phase of "oh shit we need to do something" is).

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#17
I'm wondering how big an opportunity it is for privacy-preserving companies in Europe to take over. I'm thinking of Snips (https://snips.ai) for instance, and its "Private by design" voice assistant solution. My guess is that it gives them a good attack angle, but big players like Google an Amazon will comply eventually.

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#18

Earlier quoted context omitted.

What anti-EU sentiment? The only anti-EU sentiment inside the EU comes from populist politicians and the people who vote for them, who have no idea how the EU works. And what non-EU entities think is, frankly, irrelevant.

>What anti-EU sentiment? Allow me to introduce you to https://en.wikipedia.org/wiki/Brexit

> The only anti-EU sentiment inside the EU comes from populist politicians and the people who vote for them, who have no idea how the EU works.

Already noted.

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#19
post #2

> If companies do not comply, they could face fines totaling 4 percent of their annual revenue. I am curious on how did they arrive at the 4% cap?

I'm just glad it is based on revenue instead of profits. I think corporate taxes should be the same way. I imagine the four percent had to be large enough to motivate compliance without scaring people away and further fueling anti-EU sentiment? I'm just speculating.

> I'm just glad it is based on revenue instead of profits. I think corporate taxes should be the same way.

This would be a value-added tax levied at every step in the supply chain. It's a bad idea because it favors large, vertically integrated companies.

Re: Tech Giants Brace for Europe’s New Data Privacy Rules

#20
post #11

Good time to be a contractor who knows about GDPR compliance

In what way? Genuinely curious - what sort of technical work needs to be done that requires actually knowing the regulation? I'm asking because I got my law degree with the idea that I would combine tech skills with knowledge of the law, but I never really found an angle to make that work.

Why is trampypizza's answer to this marked as [dead]? It looks like a perfectly reasonable response, no?
Post reply on HN