Publishers Haven't Realized How Big a Deal GDPR Is • Hacker News Board

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#291

Post by guitarbill » Mon, Apr 09, 2018, 2:25 AM UTC

sumeno wrote: post #170

beojan wrote: post #142

Earlier quoted context omitted.

> No, it will basically make a newsmedia site unprofitable. I think it is the EU that has not fully thought this through. Most of the news industry is already sickly, financially, and they mostly have no model other than advertising (with a very few exceptions). We have publicly funded broadcasters in most EU countries. The ad-supported news sites, on the other hand, are generally doing more harm than good. News outl…

You don't see the potential problem if the only media that is able to exist is that which is state sponsored? You may be happy with the state sponsored options now, but will that always be the case? Would you feel the same if you living in the Soviet Union or Germany circa 1940?

Ad supported publications aren't immune from this though, if anything they are just as susceptible.

To get the most ad revenue they need to cater to the majority. See e.g. clickbait. For stable income, finding a group and catering to their opinions/narratives is also an option, and is also not independent news. See e.g. infowars. Finally, to get any ad revenue, they need ads. Unlikely many corporations will run ads on anything that is perceived even slightly controversial nowadays. See e.g. YouTube.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#292

Post by kolinko » Mon, Apr 09, 2018, 2:28 AM UTC

briandear wrote: post #85

akie wrote: post #75

Earlier quoted context omitted.

IIRC it applies to EU citizens wherever they are, not just people who are on EU territory.

So do American constitutional protections apply to Americans living in France? I am having a hard time understanding GDPR jurisdictional power. US citizens in France aren’t protected by the US Fair Credit Act with French banks, even when those French banks have US subisidiaries because a French company in France isn’t subject to US legal jurisdiction. Even FATCA doesn’t subject a French bank to US law — it subjects F…

Not the constitution, but certain laws were enacted in a similar way by US. Especially in finance and securities:

- banks all over the world have to ask their customers if they aren't American, when signing up for an account. Even a local bank in rural Poland, which couldn't care less about international markets, has to now ask people to explicitly confirm that they are not American citizens

- if you're doing a security offering, and you happen to sell to an American, even if they live in Europe, and you're blocking IPs from U.S., you have to follow the US regulations as well

And yes - it is kind of shitty, but EU wasn't the one to start a trend of applying the local laws on foreign soil.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#293

Post by marcrosoft » Mon, Apr 09, 2018, 2:32 AM UTC

As a matter of morals/competitive edge, companies should try to keep personal data safe and perhaps not collect it at all.

That said, GDPR is ridiculous and in many countries, contradictory. This leads to litigation spaghetti code. It will be exploited in ways we can't yet imagine.

It is dangerous to assume GDPR applies to YOU if you are based in the US. As the world (thankfully) doesn't operate under a one-world government, let the EU live in their ignorant "This site contains cookies" world.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#294

Post by chii » Mon, Apr 09, 2018, 2:47 AM UTC

molf wrote: post #74

reid wrote: post #68

Earlier quoted context omitted.

Interesting. Which part of GDPR disallows the “decline and you cannot use the service” case?

Quoting GDPR: "Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement [...]" [1] "Consent is presumed not to be freely given [...] if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance." [2] [1] https://gdpr-i…

> the provision of a service, is dependent on the consent despite such consent not being necessary for such performance.

but to play the devil's advocate, if it costs money to provide a service, but that money is currently supplied by selling personal data to third-parties, then isn't it true that the service cannot be provided without the data?

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#295

Post by noobiemcfoob » Mon, Apr 09, 2018, 2:52 AM UTC

hanoz wrote: post #244

michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

> "Treat user data like names and emails as if they were credit card numbers" Most sites' approach to credit card numbers is to not touch them with a barge pole, have a third party receive them instead and never let the business have any sight of them, so it's a bit of a stretch to expect the same treatment for a customer's name and email address.

So...use oauth?

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#296

Post by downandout » Mon, Apr 09, 2018, 3:04 AM UTC

michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

Honestly, the best thing to do if you don’t have a high percentage of EU users/customers is to simply block EU IPs. First it was the completely useless cookie notifications, now it’s GDPR, and nobody knows what the next thing will be - we only know that there will be a next thing (there always is), and that it too will be costly and burdensome to comply with. Unless you derive a significant percentage of your revenue from EU users, it just isn’t worth it to try to keep up with the increasingly demanding whims of a heavy-handed European government.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#297

Post by ngould » Mon, Apr 09, 2018, 3:04 AM UTC

captain_murdock wrote: post #282

> we see that a majority of people who install an ad blocker don't actually do it to block ads (that's just an added bonus). They are actually doing it to block tracking. This line severely damages the credibility of the article. I found the article interesting up until I read it. I stopped reading once I read it because I couldn't trust anything else the author says. I highly doubt this statement is true. It may be…

Agreed.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#298

Post by dominotw » Mon, Apr 09, 2018, 3:07 AM UTC

mstolpm wrote: post #21

michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

I’d add: Get (documented, active) permission of users to store and use their data, understand that permission is given only for a defined cause/usage (and not indefinitely for everything you right now might not even think of), be prepared to tell users what data you store about them, why and (briefly) how it is used. Be prepared to delete user data on request. Be prepared to show documentation on how you handle the (…

> without given user consent.

you mean just create a checkbox somewhere that people click without thinking about it?

I have no idea what I am consenting to when I "agree" to all the EULAs.

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#299

Post by Jommi » Mon, Apr 09, 2018, 3:19 AM UTC

downandout wrote: post #296

michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

Honestly, the best thing to do if you don’t have a high percentage of EU users/customers is to simply block EU IPs. First it was the completely useless cookie notifications, now it’s GDPR, and nobody knows what the next thing will be - we only know that there will be a next thing (there always is), and that it too will be costly and burdensome to comply with. Unless you derive a significant percentage of your revenue…

I love this comment. Waiting for people to take the bait and reply to you!

Re: Publishers Haven't Realized How Big a Deal GDPR Is

#300

Post by diamondlovesyou » Mon, Apr 09, 2018, 3:24 AM UTC

downandout wrote: post #296

michaelbuckbee wrote: post #14

GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…

Honestly, the best thing to do if you don’t have a high percentage of EU users/customers is to simply block EU IPs. First it was the completely useless cookie notifications, now it’s GDPR, and nobody knows what the next thing will be - we only know that there will be a next thing (there always is), and that it too will be costly and burdensome to comply with. Unless you derive a significant percentage of your revenue…

Ehhhh, I'd leave it as is. Unless you have business licenses in EU countries, EU laws have no legal authority over you. If you do have such licenses, then you're probably big enough to foot the bill and possibly also can't afford to not foot the bill (due to suspended licenses).

This privacy thing is, like, their option, man. Even if you and I agree with the EU.