Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: How is GDPR affecting your business?

news.ycombinator.com

Post reply on HN
Print view View original

51–60 of 66 posts

Re: Ask HN: How is GDPR affecting your business?

#51

Post by BjoernKW »

BigMan555 wrote: post #35
BjoernKW wrote: post #17

Earlier quoted context omitted.

First, I'm responsible for handling my clients' data, such as their email addresses or phone numbers. It doesn't matter that they're business customers rather than consumers. GDPR still applies. Secondly, though not always the case, I might have to process their respective customers' data in some way in order to do my job (by having access to a production database, for example). So, yes, GDPR absolutely does apply to…

So you're saying that you are asking consent to store the phone number and email address of a client? And you'll provide clients with the right to be forgotten, meaning that you're prepared to delete their contact information? This seems like overkill.

> So you're saying that you are asking consent to store the phone number and email address of a client?

No, I didn't say that. GDPR doesn't mean that you have to ask for consent in each and every case. If as a business you have a legitimate interest to store client data for a specific purpose you don't have to ask for explicit consent. Being able to contact clients in the future who contacted you first constitutes such a legitimate interest.

As for the right to be forgotten: Sure, why wouldn't I? If they don't want to be contacted anymore and want me to delete their contact info I'm happy to oblige.

Re: Ask HN: How is GDPR affecting your business?

#52

Post by anothergoogler »

BjoernKW wrote: post #51
BigMan555 wrote: post #35

Earlier quoted context omitted.

So you're saying that you are asking consent to store the phone number and email address of a client? And you'll provide clients with the right to be forgotten, meaning that you're prepared to delete their contact information? This seems like overkill.

> So you're saying that you are asking consent to store the phone number and email address of a client? No, I didn't say that. GDPR doesn't mean that you have to ask for consent in each and every case. If as a business you have a legitimate interest to store client data for a specific purpose you don't have to ask for explicit consent. Being able to contact clients in the future who contacted you first constitutes su…

Past invoices will have names and addresses, will you shred them? Don't you need them to file taxes?

Re: Ask HN: How is GDPR affecting your business?

#53

Post by BjoernKW »

anothergoogler wrote: post #52
BjoernKW wrote: post #51

Earlier quoted context omitted.

> So you're saying that you are asking consent to store the phone number and email address of a client? No, I didn't say that. GDPR doesn't mean that you have to ask for consent in each and every case. If as a business you have a legitimate interest to store client data for a specific purpose you don't have to ask for explicit consent. Being able to contact clients in the future who contacted you first constitutes su…

Past invoices will have names and addresses, will you shred them? Don't you need them to file taxes?

Existing laws and accounting standards still take precedence over GDPR. Past invoices and accounting entries remain as they are.

Re: Ask HN: How is GDPR affecting your business?

#54

Post by rqs »

Hey just one question: Remember the old days when many people still using NTTP? Your email and IP address will be carried in every post you've sent, and other people have to download the whole post (including your email and IP) so they can view it.

Does GDPR made all NNTP services illegal?

I'm asking it because I was developing an online forum application that will publicly display your posting IP and registered email address, and sync posts with other sites.

If GDPR made that illegal, that could be a bad news for me.

Re: Ask HN: How is GDPR affecting your business?

#55

Post by [deleted] »

hankhonk wrote: post #36
standyro wrote: post #18

I work for a major news media company and our GDPR compliance has been extremely difficult with our relatively small dev staff that manages many news outlets so we've opted to block access from all of Europe. It's gotten a lot of press, but it's an unfortunate reality. Most of our adtech and analytics vendors we use have put the burden on smaller companies like us -- ripe for disaster.

then stop using them, instapaper

[deleted]

Re: Ask HN: How is GDPR affecting your business?

#56

Post by geofft »

rqs wrote: post #54

Hey just one question: Remember the old days when many people still using NTTP? Your email and IP address will be carried in every post you've sent, and other people have to download the whole post (including your email and IP) so they can view it. Does GDPR made all NNTP services illegal? I'm asking it because I was developing an online forum application that will publicly display your posting IP and registered emai…

> I'm asking it because I was developing an online forum application that will publicly display your posting IP and registered email address, and sync posts with other sites.

Please don't do this.

Apart from my own rational self-interest, I'm saying this as a subscriber to various free-software mailing lists, which occasionally get requests from someone to remove archives of support emails they sent 10 years ago. It's pretty rude to publicize the problems someone had and their frustrated response from years in the past, and make it Googleable by their name.

(Also, if by any chance you want to publicly display this as a means of deterring bad behavior of any sort, spam, rudeness, etc., it's unlikely to work - the people intent on bad behavior have proxies and anonymous email accounts, and the non-technical folks who never even thought of bad behavior won't think to protect their identity this way, so it will only hurt the people you don't want to hurt.)

Re: Ask HN: How is GDPR affecting your business?

#57

Post by rqs »

geofft wrote: post #56
rqs wrote: post #54

Hey just one question: Remember the old days when many people still using NTTP? Your email and IP address will be carried in every post you've sent, and other people have to download the whole post (including your email and IP) so they can view it. Does GDPR made all NNTP services illegal? I'm asking it because I was developing an online forum application that will publicly display your posting IP and registered emai…

> I'm asking it because I was developing an online forum application that will publicly display your posting IP and registered email address, and sync posts with other sites. Please don't do this. Apart from my own rational self-interest, I'm saying this as a subscriber to various free-software mailing lists, which occasionally get requests from someone to remove archives of support emails they sent 10 years ago. It'…

The thing is that due to the synchronization, users post could be synchronized to another site which they are not registered to.

Thus, a mechanism must be setup to allow users to manage their content on other sites. The mechanism that I currently planed was to use email verification (if (User's email === poster's email): They're the owner of the post), which requires all sync sites knows the email address (as an universal identifier) of the content owner.

To me, that means I need to share user's email with other sync parties which may not under my control. Because of that, I think it's sanctimonious to tell user that their email is under protection, I rather letting user be very aware about their email will be publicly displayed.

Another reason to publicly display users email is because I don't want to implement private message features (Which require to save private information), so if user's can know each other's email, they could just make content with their emails.

Re: Ask HN: How is GDPR affecting your business?

#58

Post by room271 »

We've had a fair bit of work around cyber-security - being a bit sharper on checking project dependencies, encrypting all data (including things like access logs) restricting firewalls even further, better audit trails, and also things like automatic password rotation.

I'd say this is all good stuff, and in most cases we were already doing it, but it is difficult to retrofit in one go.

Going forward it will be a lot easier though as new projects will simply be designed better from a security-perspective.

Re: Ask HN: How is GDPR affecting your business?

#59

Post by ebiester »

KirinDave wrote: post #44
ebiester wrote: post #15

Earlier quoted context omitted.

Alternatively, some part of your business has spent the last X months preparing for this so that their business won't be affected dramatically. I am easily tracked to my place of employment so I don't want to get into too many details, but we were doing things ethically but still had a non-trivial amount of going through, dotting our i's and crossing our t's, making sure that there weren't pockets of unknown data, pu…

If this is the case, then being transparent about it is a good policy. I hope your employer is committing to compliance publicly and apologizing to its customers for the delay.

We don’t have a delay in our case.
Post reply on HN