I think this is a cover up for making it easier for government officials to get data about you. To protect your customers you should store as little personal data as possible and encrypt all other data such as e-mail and messages, so it only can be decrypted by the user's password or key, that you only have the hash for. And also inform your customers about he importance of strong passwords or using key's. I tried to create a Microsoft account the other day and the password was only allowed to have A-z0-9 characters, with four numbers. You can probably guess most peoples password by using their name plus the birth year of their child. So don't impose any rules other then length and a warning if the password hash is in the list of 100,000 most common passwords.
Publishers Haven't Realized How Big a Deal GDPR Is
371–380 of 468 posts
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#372Earlier quoted context omitted.
and you really think that they will? you pretty sure will get the following response: ok -- hidden in their database -- (date_deleted = now()) fixed.
That's exactly what GDPR is for - I can be somewhat sure they'll delete it, and and if I'm wrong and they do what you described, I'll laugh hard as they bleed money when discovered.
Well the problem is who will control it?
Angela Merkel? Manuel Macron? Oettinger - the European Comissioner? Seriously.. nobody will control.
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#373Earlier quoted context omitted.
I dream of the day that I can ask various companies to delete every piece of data they have about me.
I dream of the day that I can discover the various companies who have any data about me...
Agreed, sadly there’s no chance for the US to get this for the next 2.5 years at a minimum
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#374Doesn't the NSA and other intelligence agencies collect detailed data on everyone? They also seem to have backdoors into a lot of centralized systems. Nobody seems to care that government organizations sit outside of regulation and tell us we need to regulate everyone else. It's simply a power play.
Beside that there are regulations that allow them to do this. Even for European Agencys it will continue to be legal to do so.
Government organisations don't sit outside of regulations. The regulations are designed around their needs and they make sure their regulatory needs are met.
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#375In fact, I think the author is underestimating the impact, right here: "Of course, making this change will have a dramatic impact on your revenue for single-visit traffic, because you basically have to design your ad model to work completely differently from how it works today." No, it will basically make a newsmedia site unprofitable. I think it is the EU that has not fully thought this through. Most of the news ind…
Television and newsPAPERs were viable businesses before the advent of the internet. And on the internet, the need to spy your reader is also quite new.
What makes privacy-sensible internet newsmedia nonviable might very well be the much more profitable spying on the client. If regulation makes that competition illegal, and demand for news is unaffected by GDPR (and why wouldn't it be), then it becomes more difficult for advertising companies to find newsmedia that provide tht extra illegal profit-taking sugar, so they will go back to more traditional advertising plans. This, in turn, will make newsmedia's lives easier in regards to finding advertiser's that do not demand spying on their readers.
At the end, sellers still need to advertise, providing ads supply, and readers still demand free newsreading, providing ad demand. The market still exists.
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#376GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…
It's a start, but that is only the easy part, where the goal is relatively simple to figure out. You also have to explicitly get legal documents signed if you make a system for companies that "own" the user data.
You need to have new procedures for obtaining, storing, using, and delete customer data. This is known as a "code of conduct". You need sufficient logging to aid incident analysis too.
I also think a lot of companies are entering a bit of panic mode because there is no clear guideline on what is sensitive data. If you make a booking system, then everything you store is potentially sensitive if you have end user data in it. If you're making IoT devices for the home with cloud access, then you have sensitive data.
The conclusion we've reached is fairly simple. If there a even a remote chance that normal day to day use of our systems contains data that can be used to build a profile of a user, then the systems data is considered sensitive.
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#377Earlier quoted context omitted.
> No, it will basically make a newsmedia site unprofitable. Good. We don't need that much "news" anyway. And I think my need would be more than covered by national TV which is sponsored by taxpayers money and BBC, which also has no advertising. There really won't be much of the value lost if we won't have sensationalized and invented news any more. Another point to consider is that need for news or just for some brai…
Good. We don't need that much "news" anyway. The "we" is where you have a problem.
[deleted]
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#378There is a huge long tail of SME 'website owners' that have no idea what they are in for. These sites are often developed/maintained by very cheap labor (students/off-shored etc) and sprinkled liberally with all sorts of 3rd party analytics/counters/share-buttons etc etc.
Not only do the site owners not even know that the site contains these things, if they do, they don't even realize the extent of data collection going on. I had a chat this morning with an owner like that. The site runs GA (they didn't know), the site runs ShareAholic (which they said wouldn't be a problem as they only use it to see in aggregate where their site visitors come from).
They never made a distinction between what data their site provides to these services through scripts or cookies, and what they themselves then get/use through the service provider.
This is not a special case. There are probably millions of these little business sites out there.
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#379Earlier quoted context omitted.
Honestly, the best thing to do if you don’t have a high percentage of EU users/customers is to simply block EU IPs. First it was the completely useless cookie notifications, now it’s GDPR, and nobody knows what the next thing will be - we only know that there will be a next thing (there always is), and that it too will be costly and burdensome to comply with. Unless you derive a significant percentage of your revenue…
That sounds ideal. Please make sure you do this, and convince many of your colleagues and compatriots to do the same. Maybe finally give us some breathing space to grow our own popular services in the face of US dominance. I used to think protectionism was stupid, but after seeing how The Great Firewall[1] is working out for China and their services, I’m not so sure anymore. The big problem with any inbound restricti…
The large US sites you’re worried about “dominating” the EU, who have significant EU traffic, will be able to comply with the GDPR and continue to compete just fine. They have the resources to hire the necessary phalanx of attorneys to advise them on how each feature and tweak to their sites interact with the GDPR, and it is a worthwhile investment for them. I was saying that smaller sites that don’t have internal legal departments and don’t need EU traffic should consider blocking EU IPs.
Re: Publishers Haven't Realized How Big a Deal GDPR Is
#380GDPR articles seem to be getting some traction on HN as everyone is trying to figure out: "Do I need to do something for this? Is so, what?" For a recent project I read (and translated to plain english) [1] every single article in the GDPR legislation and for our purposes it can be summed up as: "Treat user data like names and emails as if they were credit card numbers" AKA: be paranoid about keeping them, encrypt th…
If I have an IRC service that shows quotes from people and has 'last seen' functionality is that covered by GDPR? Some of the users are from EU countries, does that mean those features need to be turned off or have some sort of acceptance exchange with users? Would filtering out EU IP ranges be sufficient, or does this also apply to EU citizens traveling outside of the EU? The referenced page says that asking users t…
Last seen is in the grey zone, but I'd say that it can potentially be PII if combined with other data. So I would not store that data for now, until we have some clear rulings on similar topics.