771–780 of 1001 posts
Earlier quoted context omitted.
GDPR is simply a response to abusive behavior. May not be the best response, but it was about time. Then, it is surprising to me that Americans are against a national id card, but are not OK with a privacy protection law.
I believe it's because, in general, Americans distrust government and trust corporations
Corporations can't.
Here is a example of blocking all EU country codes without using any external API's.
https://gist.github.com/icodeforlove/9d22e44d0f227cb2740fd3d...
Earlier quoted context omitted.
Plus it leaves the market open for other businesses who are actually compliant so they can capture a bigger slice of the market than the existing services. There really is a lot to win.
if a preexisting startup doesn't care for the market, its probably because it's too small to be worth it. This is not 1999, most ideas have been tried at least once. And experience shows that "extra privacy" is just not a selling point.
It's not just that. It's that there is no money in cloning unsuccessful startups. Nobody wants to copy you until you're a success, but by then it's too late. By then the first mover has the momentum and resources.
This doesn't change that. By the time a startup becomes successful it will have the resources to pay compliance costs and enter the other market.
The problem is that having to exclude EU users until you're big enough to afford compliance will cause more ventures to die on the vine, before they ever become successful enough for anyone to want to copy them.
It also puts the local EU startups at an obvious disadvantage, because they have to pay the compliance costs up front instead of only after proving themselves in the US market.
I’ve been reading hacker news for about a decade, and it’s getting to the point where I don’t think there are many entrepreneurs and/or technical people on here anymore. The number of people who are saying it’s no big deal to comply with this huge law, especially for very small startups, is mind boggling. Let’s just take one feature: the requirement that you can permanently delete all of your information. Most early-…
Simply and brutally put: if you are incompetent and/or malevolent in your business practices and for that reason your business faces existencial threat from a piece of regulation that codifies the ideal setting for the industry, your business better dies ASAP.
I want that just like you can't have a random person design cars, architect buildings or teach our kids, similarly a random person cannot code up a commercial/government web site where they were "learning as I went along"; and an enterprise that can't afford to consult a lawyer can not get their hands on people's private data that they'd rather not change throughout their lives. Entrepreneurs to the hell, the amount of irresponsibility some people posting here want conceded to them is mind-boggling. I really hope that the upcoming decade will bring some sanity to this wild-west of an industry where who don't know what they are fucking doing can't just go out and handle stuff that they should not be allowed to even observe with a telescope from miles and miles away.
I plan to completely ignore GDPR laws and will not modify neither my privacy policy not my SaaS product, even if I have a lot of customers from the EU.
Why? You're opposed to privacy? And how do you plan to react when you get penalized?
Earlier quoted context omitted.
I feel the EU regulators could stand to learn something. If EU citizens are small portion of your users, and your tasked with parsing this document http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX... just blocking them doesn't seem like that bad of an idea, especially with the fines involved. I think the things that bother me is: 1) A College student working on a side project with no revenue are treated t…
> 1) A College student working on a side project with no revenue are treated the same as some massive multi-national. I hear you, but the argument is that the data doesn't care who caused the leak. A college side project leaking an SSN does the same amount of damage as a multinational leaking an SSN, so the law is going to want them to treat them equally seriously.
This is by the way the same problem with the various restaurant analogies. It makes some sense for the health department to inspect large restaurants. It would make no sense for them to subject neighborhood cookouts to the same degree of scrutiny.
GDPR seems to be based not on actual harm that could occur based on invasive, sketchy or otherwise bad data storage practices; instead, it seems based on a subjective idea that people have "fundamental rights" to various forms of state-mediated protection in relation to technology. Rights are unequivocal and almost entirely uncompromising.
(Some of the more famous blocked websites are similarly misinformed, e.g. the chicago tribune tries to tell me I'm in the EU and blocks me.)
Earlier quoted context omitted.
GDPR just says that if you are keeping data, you have to have a good reason for it. If you have to retain certain data for eg tax purposes, then that sounds like a good reason to me.
That's so reductionist as to be useless. What is a "good" reason? Are you a judge that will be presiding over these cases? Things like that are massive holes for litigation and the cause of all these compliance issues in the first place.
Any recommendations or resources for what micro internet sites should do? I'm thinking in scale from website with my picture and some software projects on it, to micro free webservice like uptime checker, to $1 seating chart maker. Block EU is totally reasonable for all these. Is it necessary?
No, it shouldn't be necessary. Because: do you need personal informations from users? If yes: why? Payment & Accounting => allowed ("legitimate use") Technical Monitoring => allowed ("legitimate use") And if some user want to cancel its account: is it a problem (if he doesn't owe you anuthing)??? No? Well... then you'll have no problem
Earlier quoted context omitted.
It sounds to me like this reflects more on the startup's sloppy practices than anything else. Prevalence of this bad practice shouldn't be an excuse for it.
Regular database backups are a bad practice?