Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Publishers Haven't Realized How Big a Deal GDPR Is

baekdal.com

Post reply on HN
Print view View original

271–280 of 468 posts

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#271

Post by merinowool »

kuschku wrote: post #150
home_boi wrote: post #126

I don't think the legislators understand the technical complexity it would take to comply with GDPR nor the benefits of tracking for the internet. Tracking makes markets more efficient. 1. Advertisers can tune their ads/targeting to get higher conversions and sales. They pay higher PPMs and PPCs. 2. Publishers get higher PPMs and PPCs. This motivates them to invest more in their content and website because each new u…

> Relevant ads also save users (the segment that buys stuff from ads) time from researching for products and services. That is specifically not wanted. Several European governments are subsidizing projects to provide consistent and exhaustive comparison tests between many products instead, so customers can for each category of product they may need find massive comparison tables, find which products fulfill their nee…

So is that going to be another parcel of life under the state control? It is easy to predict such tools are going to be abused (for example excluding products from a producer that has opposite political views to the currently ruling people)

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#272

Post by merinowool »

geofft wrote: post #30
URSpider94 wrote: post #27

Earlier quoted context omitted.

All the things you mention are certainly possible, but if that’s truly what consumers wanted (judged by where they spend their time and money), then the market would reward companies that provided those services. Put another way, you can argue as much as you want that people want to eat salad and steamed vegetables for every meal, because it will make them thinner and healthier. And yet, McDonalds is still doing well…

What? Why? The market rewards working services over not-yet-working ones - it's not surprising that customers who prefer a more complicated service will use the less complicated one in the meantime. There's also all sorts of confounding things with social networks like network effects. Capitalism is one way to get at a society's preferences. It is not the only way, nor is it able to perfectly determine a society's pr…

Capitalism is the most free of all, from there the more you turn left the more authoritarian it gets.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#273

Post by geofft »

merinowool wrote: post #272
geofft wrote: post #30

Earlier quoted context omitted.

What? Why? The market rewards working services over not-yet-working ones - it's not surprising that customers who prefer a more complicated service will use the less complicated one in the meantime. There's also all sorts of confounding things with social networks like network effects. Capitalism is one way to get at a society's preferences. It is not the only way, nor is it able to perfectly determine a society's pr…

Capitalism is the most free of all, from there the more you turn left the more authoritarian it gets.

Why is democracy not the most free of all? Let one person have one vote - not one dollar have one vote.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#274

Post by zer00eyz »

hanoz wrote: post #244
michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

> "Treat user data like names and emails as if they were credit card numbers" Most sites' approach to credit card numbers is to not touch them with a barge pole, have a third party receive them instead and never let the business have any sight of them, so it's a bit of a stretch to expect the same treatment for a customer's name and email address.

Let me re-state what your saying:

Most sites are incapable of receiving, storing and handling credit card numbers. This is because the staff building the service either lacks the technical knowhow or the organizational wherewithal to deal with the problem in a successful way.

Why should it be any different for emails, names, usernames or passwords (because end users re-use those).

If everyone starts acting like this data is important (it is) and valuable (it is and that might decrease with the passage of this law) - we might just get to a better place. In the absence of regulation companies will get away with whatever they can - ethics be dammed.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#275

Post by dahauns »

briandear wrote: post #218
molf wrote: post #90

Earlier quoted context omitted.

> The idea that GDPR requests have to be honored by some local ecommerce company in Idaho is just nonsense and not supported by any international legal precedent. This is true. GDPR would only apply there if they were "offering goods or services, irrespective of whether a payment of the data subject is required, to data subjects in the European Union". [1] This is understood to mean they must be marketing to the EU,…

European languages? That’s absurd. Your product could be targeting US Spanish speakers, African speakers of French or newly arrived German speaking US citizens. Using language as a determinant is without any legal basis. Having your website in French doesn’t mean you are selling to French citizens. Language doesn’t equal location. Language does not impart jurisdiction. If a small hotel in California had a French lang…

Targeted Language by itself certainly won't be enough, but it is definitely seen as one indicator by the CJEU.

https://iapp.org/news/a/what-does-territorial-scope-mean-und...

(And - case law? Not really a thing in most countries executing the GDPR.)

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#276

Post by wll »

realo wrote: post #262

As a Canadian, if I am also an eCitizen of Estonia, will the GDPR protect me from EU-based companies? Or do I have to actually _live_ in the EU to be protected?

As of April 2018, Estonian e-Residency does not grant any right other than access to e-services. [0] It is implausible digital residency programs will ever supersede standard citizenship or residency requirements and procedures.

[0] https://web.archive.org/web/20180409002346/https://e-residen...

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#277

Post by isostatic »

briandear wrote: post #222
isostatic wrote: post #103

Earlier quoted context omitted.

> So do American constitutional protections apply to Americans living in France? I'm no expert, but I thought on the whole the constitution has nothing to do with citizens -- it's a list of rules that the US government must follow. It certainly has no hold over the German government. > This idea that EU citizens are protected worldwide is just ridiculous. EU jurisdiction doesn’t extend beyond the EU. If you, as someo…

Charges against Sklyarov were dropped due to jurisdiction. Your example proved my point. And actually he DID visit the US; that’s where he was arrested.

So an American can be expected to be arrested on arrival in Paris on holiday because the company they work for ignores the provisions of the GDPR

Sklyarov charges were dropped in a typical american plea-bargain

"Mr. Sklyarov agreed to cooperate with the United States in its ongoing prosecution of Mr. Sklyarov’s former employer, Elcomsoft Co., Ltd. Mr. Skylarov will be required to appear at trial and testify truthfully, and he will be deposed in the matter. For its part, the United States agreed to defer prosecution of Mr. Sklyarov until the conclusion of the case against Elcomsoft or for one year, whichever is longer. Mr. Sklyarov will be permitted to return to Russia in the meantime, but will be subject to the Court’s supervision, including regularly reporting by telephone to the Pretrial Services Department"

I see nothing about jurisdiction there.

The US has pushed the world around for along time, the world is pushing back.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#278

Post by dane-pgp »

aldoushuxley001 wrote: post #238
michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

Would usernames be included? Seems incredibly taxing to encrypt usernames too but is that what's suggested?

The GDPR specifically introduces a class of data called "online identifiers":

https://gdpr-info.eu/recitals/no-30/

which includes IP addresses and seems to extend to things like email addresses and usernames.

How this will end up affecting functionality and implementations of online services is not yet clear, at least to me.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#279

Post by username223 »

martin_bech wrote: post #187
sumeno wrote: post #170

Earlier quoted context omitted.

You don't see the potential problem if the only media that is able to exist is that which is state sponsored? You may be happy with the state sponsored options now, but will that always be the case? Would you feel the same if you living in the Soviet Union or Germany circa 1940?

How is CNN, Fox News and the sinclair group, working out for you guys? I trust state paid media in the EU, way more than any US news media. The reason why most EU countries have state paid media, is so that its non commercial, non partisan, and cant be bought. There are different principles in place, so government has no say, in what is broadcast/not broadcast. This also means that all political parties get the same…

> How is CNN, Fox News and the sinclair group, working out for you guys?

Not well, and I'd add MSNBC to that list, however much I may be a dirty pinko who agrees with their editorial stance. NPR and PRI do what they can, but I really wish we had something like the BBC here, with non-corporate funding and a remit to report current events.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#280

Post by mtremsal »

borne0 wrote: post #162

I've had to deal with this at work (anticipatory only so far), but what I can't seem to figure out is what the inquiring European needs to provide to us to prove that the data we have is actually theirs. We don't capture pii data in most instances, so if someone requests their info under GDPR and provide us an IP and a time do we take them at their word?

There's clear language in the regulation on the obligation to validate the identity of the data subject.

How to do that in a satisfactory manner... leading practices might take a few months to crystalize.

Post reply on HN