USA needs law 'a lot like GDPR' says Salesforce CEO Marc Benioff

Post by atomic77 » Wed, May 30, 2018, 4:33 PM UTC

whatshisface wrote: post #97

dnomad wrote: post #69

Earlier quoted context omitted.

What you don't realize is that the lawlessness around user data hurts big corporations too. If you're a big corporation collecting significant data than you've taken on a significant liability but the nature of this liability is amorphous. How much will it cost you if your data gets hacked? What will be the impact if you share the data with a partner and the partner gets hacked? How much can you share in your api? Wh…

> How much will it cost you if your data gets hacked? What will be the impact if you share the data with a partner and the partner gets hacked? Historically, these numbers have been $0.0+/-0. Executives aren't exactly bumbling around with hazardous materials.

Post by curun1r » Wed, May 30, 2018, 4:37 PM UTC

3pt14159 wrote: post #91

tarr11 wrote: post #7

Earlier quoted context omitted.

I don't think he's lying. But the reasons he wants GDPR are probably just as calculating as you would expect: 1. They already had to do most of this work for GDPR already so the cost will be lower 2. By saying this, he can be invited to meet with legislators who will shape the law. 3. Smaller competitors or startups will be discouraged from entering the market due to an increased regulatory environment (similar to PC…

There are three reasons in addition: 1. Insulating himself from future lawsuits. Judges look very favourably towards corporations that try to work with regulators before a crisis. 2. Legislating a fix reduces market demand for a technical fix. Imagine a world where a competitive platform to the internet / the web arises. In such a case if the public feels safe because of legislation then they're less likely to abando…

Post by jakelazaroff » Wed, May 30, 2018, 4:39 PM UTC

nathan_long wrote: post #111

kinsomo wrote: post #35

Earlier quoted context omitted.

> GDPR...creates magical rights where none exist. You don't own information about you. Data is data. You could literally say that about any property right ever. For instance: common law creates magical rights where none exist. You don't own your toothbrush. Matter is matter. The law can create rights. That's how most rights are created.

I'm a fan of privacy legislation, but your comparison is a little strained in my opinion. You have to consciously decide to take me toothbrush, and it deprives me of it. But just seeing me walk by puts "my data" into your mind, and arguably doesn't harm me. Clearly, when a phone network sells my location data to the highest bidder, I'm harmed. But they do need to know my location to provide me service. In general, I…

Post by hannasanarion » Wed, May 30, 2018, 4:41 PM UTC

CamTin wrote: post #63

greatamerican wrote: post #4

Such a law will not survive a Constitutional challenge. Just rent seeking by an incumbent.

These recently-discovered European "rights" are probably non-starters, but the ability to get a Google-takeout style package of your own data, and some reasonably protections regarding consent and the way your data is used would clearly Constitutional. We already force some industries to follow most of these precepts in other laws that haven't been challenged: credit agencies have to explain your credit score to you,…

Post by jiggliemon » Wed, May 30, 2018, 4:47 PM UTC

Kalium wrote: post #133

jiggliemon wrote: post #22

Can’t all this GDPR stuff be abstracted away into a framework? Or at least some kind of pattern/generator tooling? It seems like there’s room for an enterprise framework that does all the compliance work for you (for US gov contacts, i18n, user info download etc). Maybe calling it enterprise is a misnomer. Maybe it’s a spec that framework’s can target or comply with?

> Can’t all this GDPR stuff be abstracted away into a framework? Or at least some kind of pattern/generator tooling? I understand why you think this way! It's an obvious approach, where there's a bunch of stuff that needs to be done and it's the same everywhere. Why not just have a framework that handles it all for you? It's so clear! It's perhaps possible that many of the requirements of GDPR are beyond the scope of…