Guy shuts down forum, goes through the nightmare letter dissecting each part as "good question" or "you should have this already" or "easy one". So what was his issue anyway?
It's not the same person.
Shutting Down Forum (GDPR)
221–230 of 534 posts
Re: Shutting Down Forum (GDPR)
#222Earlier quoted context omitted.
>If there's a risk that someone could sue you over something That seems like a pretty broad policy... someone could all the time for any reason no matter how good a reason.
Sure, it's not black and white - it's a scale. We don't lawyer up for literally everything. But we do lawyer up for a lot of things. It's sort of like the "never roll your own security" advice that gets brought out when people ask questions about crypto. To a certain extent, yeah, we do have to roll our own security. Of course developers need to roll their own stuff, at least at the integration level. But as soon as…
In Europe you don't get big fines for no good reason. And if you've attempted to comply you'll most likely get a warning first.
So why not roll your own?
Re: Shutting Down Forum (GDPR)
#223Earlier quoted context omitted.
Yeah i'm familiar with that. I was wondering if that was the exact request. It's not clear to me that the dude got that exact request. It's also not clear to me that anyone getting that letter must do what that letter says to the letter else face consequences. We haven't seen that situation tested yet (although I can get why someone might not want to test it them self) all we've seen are letters being sent from indiv…
Who wants to be a guinea pig for lawyers? what fun!
It wouldn't be lawyers unless it got a lot further down the line and went to tribunal. It would be the ICO (or equivalent), which is the regulator.
Re: Shutting Down Forum (GDPR)
#224Earlier quoted context omitted.
What you are saying is: don't use the internet. Google, Facebook, Twitter, etc. got websites to implement their like buttons everywhere. The information gathered by them is collected and everybody is being tracked wherever they go.
If a few mega corporations like google, fb, and twitter are The Problem, why are we making a law that generally applies to everyone and will disproportionately impact smaller organizations instead of dealing with these mega corporations per se? If we aren't as a world terrified of what is being done by small groups like the open source organization announcing it is shutting down in the very post under discussion, why…
An open source CI project shutting down its forum because it can't ensure the proper handling of the personal data of its members is neither terrifying, nor a tragedy, it's the law working as intended.
People clueless about privacy and privacy abusers are no longer welcome to the data of EU citizens.
Re: Shutting Down Forum (GDPR)
#225From the prototype letter: "I am a customer of yours." Not until you pay me, you're not. Yes, Mr. Well Actually, I know that the law says otherwise, and that's exactly why the law is FUBAR.
You don't have to be a customer for GDPR to apply to you, they just have to collect PII from you to be considered the data subject and now the organization need to follow GDPR.
If you collect data from me when I visit your website, even without me buying anything, you have now collected data and you need to comply.
The use of the word "customer" in this context is incorrect.
Re: Shutting Down Forum (GDPR)
#226I"m not really a fan of the GDPR. I don't think it really protects privacy. I think it just uses the power of the EU, a fairly big and strong organization, to intimidate the rest of the world to comply with laws that it really shouldn't have legal jurisdiction to enforce globally. I think this is a scary precedent to set that the biggest bully on the block can de facto enforce such standards because the rest of the w…
> If you want none of your personal info on the web, I have a suggestion: Don't participate in forums, social media, etc.
If you don't want to get robbed, don't leave your home.
Re: Shutting Down Forum (GDPR)
#227Earlier quoted context omitted.
What you are saying is: don't use the internet. Google, Facebook, Twitter, etc. got websites to implement their like buttons everywhere. The information gathered by them is collected and everybody is being tracked wherever they go.
If a few mega corporations like google, fb, and twitter are The Problem, why are we making a law that generally applies to everyone and will disproportionately impact smaller organizations instead of dealing with these mega corporations per se? If we aren't as a world terrified of what is being done by small groups like the open source organization announcing it is shutting down in the very post under discussion, why…
Because that's how laws work, they apply to everyone.
Then again what you say is a misrepresentation and biased idea, what proof do you have that GDPR will disproportionately impact small organizations ?
Have you read the actual annoucement posted here ? asking because it does not say that it is shutting down but that it is moving its community discussion from a self hosted discourse forum to a third party hosted subreddit because discourse lacks the ability to properly address GDPR request and lack of time to do so.
Of course GDPR also applies to FB, Google, etc. Have you followed the discussions 5 years ago when GDPR was in the making and witnessed the intense lobbying from silicon valley against strong protection ? Probably not.
Are you aware of the noyb.eu[1] initiative, Max Schrems again, currently targeting google, facebook, whatsapp and instagram for their "forced consent" (more to come) ? La Quadrature du Net a french internet rights organization is currently working on 12 class actions targeting google, facebook, amazon, apple and microsoft, etc.
Re: Shutting Down Forum (GDPR)
#228Earlier quoted context omitted.
If a few mega corporations like google, fb, and twitter are The Problem, why are we making a law that generally applies to everyone and will disproportionately impact smaller organizations instead of dealing with these mega corporations per se? If we aren't as a world terrified of what is being done by small groups like the open source organization announcing it is shutting down in the very post under discussion, why…
I can't comment on the effectiveness of GDPR on the large data farmers such as Facebook and Google. However, I think that the alternative that you are proposing for lawmakers to go specifically after the current infringers of privacy would set a scary precedent. We shouldn't have specific corporations operating under a different set of laws than the rest of society, as that would undermine the rule of law.
We should handle companies that have >1M data records differently from smaller companies.
Most countries handle private persons with larger income differently, e.g. they need to pay more income tax.
Most countries handle startups differently, e.g. they don't need to pay taxes in the first years.
Most countries handle farms differently than other corps, e.g. they give subsidies to them.
Most countries handle people with no income differently, e.g. they get social security payments.
Most countries handle banks differently, e.g. they are regulated.
Most countries handle health companies differenty, e.g. they are regulated.
Re: Shutting Down Forum (GDPR)
#229Overreaction as usual!
Re: Shutting Down Forum (GDPR)
#230Earlier quoted context omitted.
Nobody will fine an open-source project that amount of money. The goal of GDPR is not to bankrupt anybody but to nudge them into compliance. If you aren't maliciously handling user data, you are not a target of high fines.
Then why does the law not have this an an exemption?
Have what as an exemption? Not applying GDPR to small-time open source projects? Being open source doesn't suddenly make it fine to mishandle users' information.