521–530 of 1001 posts
Earlier quoted context omitted.
Even if you delete it from disk and remove from memory, you may be required to remove it from offline backups too like tapes and other media.
Not true.
... unless you plan to use the backups.
Then you have to have another service that tracks entities to delete when a backup it's restored... and back that up separately.
Earlier quoted context omitted.
I feel the EU regulators could stand to learn something. If EU citizens are small portion of your users, and your tasked with parsing this document http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... just blocking them doesn't seem like that bad of an idea, especially with the fines involved. I think the things that bother me is: 1) A College student working on a side project with no revenue are treated t…
1. when you open a restaurant nobody cares you're a collage student. You have to have all the checks and permits to serve people food. It's not because somebody hates small businesses, it's because the right not to be poisoned is more important than the right to do business hassle-free. Why should internet be different? 2. Fuck your souvereignty. Seriously. USA has no problem violating secrecy of correspondency world…
Earlier quoted context omitted.
COPPA only applies to sites that are directed towards children or have "actual knowledge" that they're collecting data from children. It's legally sufficient to ask for birthdays and refuse signups from anyone under 13.
When you learn that someone lied and they are under 13yo, the rule applies again.
I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
Clearly you have a different definition of entrepreneurs/technical people than I do. Those seems like impositions on people who implement bad practice or work in fields that have morally questionable practices regarding people's data and identification. Many people I know don't engage or work in such industries because of the moral implications of doing so and what people are doing with data. Its not about "just ask…
I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
Even if you delete it from disk and remove from memory, you may be required to remove it from offline backups too like tapes and other media.
Earlier quoted context omitted.
What does it mean for a website to "cater" to just my home country? The internet doesn't know political boundaries and most sites cater to all visitors on some marginal level.
Most websites are products nowadays. If you have a simple blog without trackers and ads this is really not going to effect you that much. > The internet doesn't know political boundaries Tell that to this US law the whole world has to comply with to called DMCA.
Earlier quoted context omitted.
So which parts of the GDPR do you actually disagree with in case of this XMPP service? Mostly you need to tell people what you collect, allow removing accounts and history, and tell them if you're sending the data to third-parties. If you're running a private service you most likely already fulfill those requirements. Where's the annoyance?
In the specific case of XMPP, wouldn't I need to have an agreement with every other admin who federates their XMPP server and work out what exactly our roles are as defined by GDPR? XMPP still has active development community around it so this will no doubt get much easier with time, but that's just XMPP.
I was going to go to town on it until I did a quick pre-emptive search but I had no idea about this being a thing: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/451 - 451 Unavailable For Legal Reasons
I'll assume that 451 is designed to be available if a canary might be required at short notice.
Earlier quoted context omitted.
As a French guy, these type of comments make me smile. The GDPR is basically just the implementation of the French law "Informatique et Liberté" into the European Level. (You can read on HN many Germans saying that it's actually the implementation of the Datenschutzgesetzt. The truth is: these two laws are extremely similar.) This law has been in application since 1978 [1]. And in 2018, we have adtech companies like…
>There's is a lot of implicit contracts (you filled up our sign up form? Well, then you chose to give us your data. ...) // AIUI that's one of the main changes, that explicit consent is now needed to retain data and specific details of how it will be secured, who it might be passed to, must be given. Also that if the service being offered doesn't need the data, that the company offering the service can't insist on ha…
Earlier quoted context omitted.
Even if you delete it from disk and remove from memory, you may be required to remove it from offline backups too like tapes and other media.
You don't necessarily have to delete stuff from cold storage right away. You just need to have a process to remove deleted PII when you retrieve/rewrite your backups.