Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR compliance as a service

gdpr-shield.io

Post reply on HN
Print view View original

21–30 of 158 posts

Re: GDPR compliance as a service

#21

Post by CLGrimes »

vemv wrote: post #12

Anyone can expand on what "vindictive reporting from no-win-no-fee legal firms" would exactly consist of?

If an EU citizen believes that their personally identifiable information was obtained without their consent, the EU GDPR allows firms to do an audit on the company. The citizen who filed the complaint would enlist help from a no-win-no-fee legal firm, meaning, if they don't win (with infractions being $10 million minimum), the citizen, who is now a client of the firm, would not be out any money. If they do win, most likely the firm would make a windfall after carving out their share of the proceeds.

Re: GDPR compliance as a service

#23

Post by jwilliams »

quickthrower2 wrote: post #7

I'm currently an EU-ish Citizen, not residing in the EU. Will it block me? Also will it block JS-blocking EU Citizens residing in the EU? Let's not mention VPNs. Let's not mention Tor. This feels like a "registry cleaner" for GDPR o. xkcd: https://xkcd.com/1969/

On my (and other's) current read, it only applies when you are resident in the EU. Specifically:

> It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the company’s location.

Re: GDPR compliance as a service

#24

Post by stevespang »

Also to note, if your website and your company structure/gross income is below a certain monetary value, you can just tell the EU to f$%K off - - they cannot squeeeze blood out of a turnip, do you think they will go to the trouble to have a warrant prepared for you through Interpol ?

Re: GDPR compliance as a service

#25

Post by paulddraper »

kuschku wrote: post #13
CorpOverreach wrote: post #11

Maybe I'm missing something - but as a US citizen, with a US company, how can EU laws be enforced against me? What's the legal channel here? Do they plan on arresting me if I decide to vacation to an EU country? Will the US gov't comply with levying fines due to some treaty/agreement between the countries?

The most likely solution is the same way the US enforces US laws (e.g. Megaupload case) in other countries: Seizing their assets (through cooperation with banks) and then asking for extradition.

Frightening to think something as innoculus as making a website of chocolate chip recipes and logging visitor IPs could provoke that.

Re: GDPR compliance as a service

#26

Post by jonatanheyman »

quickthrower2 wrote: post #16
judge2020 wrote: post #14

Thought this was a joke SaaS offering, but inputting google.com as the domain and a burner card, it's real [0]. [0] https://judge.sh/3Bc2E0GR.png

-

JavaScript doesn't break if you don't supply all arguments in a function call.

Re: GDPR compliance as a service

#27

Post by smnrchrds »

CLGrimes wrote: post #21
vemv wrote: post #12

Anyone can expand on what "vindictive reporting from no-win-no-fee legal firms" would exactly consist of?

If an EU citizen believes that their personally identifiable information was obtained without their consent, the EU GDPR allows firms to do an audit on the company. The citizen who filed the complaint would enlist help from a no-win-no-fee legal firm, meaning, if they don't win (with infractions being $10 million minimum), the citizen, who is now a client of the firm, would not be out any money. If they do win, most…

Wait! I was under the impression that fines due to GDPR are just that, fines. They are paid to the government, not individuals. At most, getting fined due to non-compliance can suggest that if individuals bring civil lawsuits against the company, they may win and be awarded damages, the amount of which depends on how much damages they can prove they have incurred as a result of misuse of their data, not statutory amounts. Is that not the case? Is the fine actually paid to the individuals?

Or are your suggesting that some patriotic legal firms would do all the legwork for free so that the government treasury would get a boost?

Re: GDPR compliance as a service

#28

Post by [deleted] »

jloughry wrote: post #5

The privacy of EU persons coming in from a non-EU IP address still need to be protected under GDPR. This solution is a start but it's not bulletproof. Edit: I don't want anyone to think I believe it's a good start but it is a kind of solution. I wonder if lots of US companies, once they begin to realize GDPR is a problem for them, won't decide to try one of two things: 1. This: block access from IP addresses believed…

[deleted]

Re: GDPR compliance as a service

#29

Post by niko001 »

jloughry wrote: post #5

The privacy of EU persons coming in from a non-EU IP address still need to be protected under GDPR. This solution is a start but it's not bulletproof. Edit: I don't want anyone to think I believe it's a good start but it is a kind of solution. I wonder if lots of US companies, once they begin to realize GDPR is a problem for them, won't decide to try one of two things: 1. This: block access from IP addresses believed…

When you make a reasonable effort to block access to EU users, EU citizens aren't covered under GDPR if they happen to access your site from a non-EU country temporarily:

"This won't apply to every U.S. business — just the ones that are knowingly, and actively, conducting business in the EU. In this vein, EU courts have the discretionary ability to determine if a U.S. company was purposely collecting EU resident data and subverting GDPR compliance. So, in some cases, the inadvertent collection of personal data will be forgiven if it is found to have been occasional and "unlikely to result in a risk to the rights and freedoms of natural persons."

(from https://community.spiceworks.com/topic/2007530-how-the-eu-ca... )

Re: GDPR compliance as a service

#30

Post by adambrenecki »

quickthrower2 wrote: post #16
judge2020 wrote: post #14

Thought this was a joke SaaS offering, but inputting google.com as the domain and a burner card, it's real [0]. [0] https://judge.sh/3Bc2E0GR.png

-

'a' and 'm' are assigned to in the body of the function. Having them as arguments that aren't provided (and thus initially set to undefined) just ensures that they can be assigned to without 'var', saving a character or two.
Post reply on HN