Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Publishers Haven't Realized How Big a Deal GDPR Is

baekdal.com

Post reply on HN
Print view View original

21–30 of 468 posts

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#21

Post by mstolpm »

michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

I’d add: Get (documented, active) permission of users to store and use their data, understand that permission is given only for a defined cause/usage (and not indefinitely for everything you right now might not even think of), be prepared to tell users what data you store about them, why and (briefly) how it is used. Be prepared to delete user data on request. Be prepared to show documentation on how you handle the (personal) data. And delete data that is not necessary any longer in regular intervals. And: Don’t share, sell or rent personalized data to any third party without given user consent.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#22

Post by nopriorarrests »

AlfeG wrote: post #20
nopriorarrests wrote: post #17

One-time users includes all one-time visits and all the visits where people have not done anything to give you their consent. This means you cannot load any 3rd party tools. All your ads have to be delivered via 1st party means (so no 3rd party ad code) and it cannot contain any personally identifying information. That is one weird claim. Let's count "one-time user" as someone completely anonymous -- no cookie, no lo…

But there is a lot of other PID with this visit - ip address, cookies, browser fingerprint

Ok, let's say I, as a publisher, don't set user cookie if user hasn't registred/logged in, and don't store IP in logs, and don't do browser fingerprinting.

Why can't I load some 3rd party tools?

What author is claiming, essentially, that in a mere 2 month from now, you can sue almost any European publisher for data privacy breach. Outrageous claim require outrageous proof.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#23

Post by michaelbuckbee »

iovrthoughtthis wrote: post #18
michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

This is a GREAT project!! Thanks! Could you make it a git repo so we can field alterations, additions and discussion?

That's a good thought, right now it's actually a google spreadsheet that I write markdown into the individual cells export as a CSV and then run through a ruby script that turns it into HTML. Which (obviously) sounds insane, but it's significantly better than trying to edit a raw html doc of this size, get feedback, etc.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#24

Post by andy_ppp »

michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

This is totally awesome! Thank you, it has been sent round the office... I too second the idea of putting this onto GitHub so it can live and be updated as understanding of the requirements increases!

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#25

Post by TimothyBJacobs »

nopriorarrests wrote: post #22
AlfeG wrote: post #20

Earlier quoted context omitted.

But there is a lot of other PID with this visit - ip address, cookies, browser fingerprint

Ok, let's say I, as a publisher, don't set user cookie if user hasn't registred/logged in, and don't store IP in logs, and don't do browser fingerprinting. Why can't I load some 3rd party tools? What author is claiming, essentially, that in a mere 2 month from now, you can sue almost any European publisher for data privacy breach. Outrageous claim require outrageous proof.

Because almost assuredly the 3rd party tools collect that information and you are responsible for what you put on your website. The article specifically mentions this when talking about data processors and data controllers.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#26

Post by hrktb »

mlinksva wrote: post #3

> Today, for instance, we see that a majority of people who install an ad blocker don't actually do it to block ads (that's just an added bonus). They are actually doing it to block tracking. Is there any evidence for this at all?

Not evidence, but a portion of the users install blocking software to speed up browsing, and and tracking blocking will often be the first target (it can be under “block third party script”, same effect)

An example of this mindset: http://www.zdnet.com/article/how-to-speed-up-browsing-by-usi...

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#27

Post by URSpider94 »

EGreg wrote: post #7

What if I told you... (Morpheus photo) 1. Social websites don’t have to be giant, centralized communities too big to police themselves. 2. People need more tools to help them achieve things in the real world, rather than spending hours a day chatting about the real world online. 3. There are ways to make money online without ads begging you to click on them, and they involve real-world goods and services that your we…

All the things you mention are certainly possible, but if that’s truly what consumers wanted (judged by where they spend their time and money), then the market would reward companies that provided those services.

Put another way, you can argue as much as you want that people want to eat salad and steamed vegetables for every meal, because it will make them thinner and healthier. And yet, McDonalds is still doing well (maybe not quite as well as before, but still very well).

Regulation will curtail the edge cases where people are acting to their own detriment to a degree that society deems unacceptable. Beyond that, it’s up to the invisible hand of capitalism to dictate what customers want.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#28

Post by geofft »

LoSboccacc wrote: post #11

nobody realized how much big of a deal GDPR is going to be. if you digitized your partner business card, if you store their number on your phone etc that's personal data and that all need to be renegotiated and you need a database to hold track of their informed consent. a little exaggerated for fun here https://www.brandexpublishing.co.uk/the-new-procedure-for-ex...

That article brings up good points about synchronizing data. I intentionally do not keep my friends' names in my contacts (I primarily use recent numbers, and I started storing a few anonymous names when Signal required use of actual contact entries) because I do not want my friends' data to be sent to whatever random service I might have installed.

Given the whole Cambridge Analytica thing this seems good.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#29

Post by guitarbill »

nopriorarrests wrote: post #22
AlfeG wrote: post #20

Earlier quoted context omitted.

But there is a lot of other PID with this visit - ip address, cookies, browser fingerprint

Ok, let's say I, as a publisher, don't set user cookie if user hasn't registred/logged in, and don't store IP in logs, and don't do browser fingerprinting. Why can't I load some 3rd party tools? What author is claiming, essentially, that in a mere 2 month from now, you can sue almost any European publisher for data privacy breach. Outrageous claim require outrageous proof.

> Why can't I load some 3rd party tools?

You can, you just need assurance that they're also GDPR compliant if you want to be GDPR compliant.

If the third-party violates GDPR, but requires your website to run on (e.g. third-party JS, other types of beacons), I think judges are going to have a dim view on that, and so you can't simply claim that it's them, not you. (There may be mitigations, e.g. if you have a contract with them that spells out GDPR compliance, but then they break that - but how many people have contracts for the JS they embed?)

Edit: One way this argument could be laid out is that by including such third-parties in your website, you're instructing the browser to load them, and therefore effectively forwarding GDPR-related data to them. Technically, this isn't really too different from a REST API call you'd perform on the server, or an AJAX call (although the server call doesn't necessarily forward e.g. the IP).

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#30

Post by geofft »

URSpider94 wrote: post #27
EGreg wrote: post #7

What if I told you... (Morpheus photo) 1. Social websites don’t have to be giant, centralized communities too big to police themselves. 2. People need more tools to help them achieve things in the real world, rather than spending hours a day chatting about the real world online. 3. There are ways to make money online without ads begging you to click on them, and they involve real-world goods and services that your we…

All the things you mention are certainly possible, but if that’s truly what consumers wanted (judged by where they spend their time and money), then the market would reward companies that provided those services. Put another way, you can argue as much as you want that people want to eat salad and steamed vegetables for every meal, because it will make them thinner and healthier. And yet, McDonalds is still doing well…

What? Why?

The market rewards working services over not-yet-working ones - it's not surprising that customers who prefer a more complicated service will use the less complicated one in the meantime. There's also all sorts of confounding things with social networks like network effects.

Capitalism is one way to get at a society's preferences. It is not the only way, nor is it able to perfectly determine a society's preferences.

Post reply on HN