261–270 of 468 posts
Or do I have to actually _live_ in the EU to be protected?
Earlier quoted context omitted.
> This should have been a brower-based implementation globally that every site must adhere to. This. if EU actually cared enough, they 'd go to the browser vendors to enforce some basic prompts on tracking and forms, and it would be better than gdpr because it would work for everyone from day 1. This law will bring a few more prompts and not much else (because most services can be provided with slight changes like ha…
IIRC this is exactly what is being done with the upcoming ePrivacy directive. For example I believe it will become mandatory to honour the DNT header.
Earlier quoted context omitted.
>If you are big enough to have to worry about this you are probably a company with plenty of resources to think and comply with this You'd be surprised. GDPR is vague enough and just open to interpretation enough that there are many different companies interpreting it in many different ways. I'm a consultant and I talk to many multi-nationals and all of them have their own spin on it. Especially around the "except wh…
My company is one that everyone on HN has heard of, and they are interpreting it as "don't worry, we don't need to make any changes because _____". It will be interesting to see if they change their tune as May 25 approaches.
I am coming to the whole GDPR party really late (very recent startup). For example we use Auth0 for our authentication service. Auth0 doesn't support storing everything. So we use the auth0 user id in a db table, which contains some user preferences. Does that mean i need to get consent from the user to use their user id? In our database even though they are paying for this service, and we are paying for their auth0…
Does this mean every site will need to ask permission for Google Analytics?
One of the caveats though, is that you shouldn't be able to identify a specific user. So, you would need to anonymize the IP addresses you're tracking [1]. My understanding is that you should not be tracking or storing information that can be used to identify a single user. So cookies are ok, but you have to ask permission for any cookie that can be used to personally identify a user.
[1] https://developers.google.com/analytics/devguides/collection...
Earlier quoted context omitted.
> No, it will basically make a newsmedia site unprofitable. I think it is the EU that has not fully thought this through. Most of the news industry is already sickly, financially, and they mostly have no model other than advertising (with a very few exceptions). We have publicly funded broadcasters in most EU countries. The ad-supported news sites, on the other hand, are generally doing more harm than good. News outl…
You don't see the potential problem if the only media that is able to exist is that which is state sponsored? You may be happy with the state sponsored options now, but will that always be the case? Would you feel the same if you living in the Soviet Union or Germany circa 1940?
None EU media would still exist.
Several UK media outlets use paywalls already, presumably they too would remain.
Earlier quoted context omitted.
In general I agree with your assessment, that being said I do think that the GDPR is a decent set of guidelines for putting in place a system that respects user data in a way that clearly has not been happening.
Why not prevent personal data from leaking in first place? It's a solution applied at the wrong level, a or wrongly drawn system boundary if you will. The damage it causes is psychological, preventing many EU businesses from starting in first place. They're destroying the food chain for startups (small independent businesses). The EU and politcians are anti UX, they have no clue about the effect of their laws on peop…
"The first place" would be not collecting it, an option that companies are seriously considering for nonessential data that they previously collected merely because it was convenient and accepted to do so.
As a Canadian, if I am also an eCitizen of Estonia, will the GDPR protect me from EU-based companies? Or do I have to actually _live_ in the EU to be protected?
Earlier quoted context omitted.
> No, it will basically make a newsmedia site unprofitable. I think it is the EU that has not fully thought this through. Most of the news industry is already sickly, financially, and they mostly have no model other than advertising (with a very few exceptions). We have publicly funded broadcasters in most EU countries. The ad-supported news sites, on the other hand, are generally doing more harm than good. News outl…
You don't see the potential problem if the only media that is able to exist is that which is state sponsored? You may be happy with the state sponsored options now, but will that always be the case? Would you feel the same if you living in the Soviet Union or Germany circa 1940?