Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shutting Down Forum (GDPR)

discourse.drone.io

Post reply on HN
Print view View original

271–280 of 534 posts

Re: Shutting Down Forum (GDPR)

#271

Post by codedokode »

michaelbuckbee wrote: post #79
scaryclam wrote: post #4

I'm a little confused. Who is sending compliance requests? If it's not the ico, there's rely no problem. If it is the ico, ask what needs to change. No lawyers required.

The forum owner wasn't getting "compliance requests" he was receiving "subject data access requests". Those requests can be: - Please give me all my data - Please delete all my data - Please stop doing things (processing) my data Or some mix of all the above. A site owner (controller) has 30 days from receiving such a request to respond or the person making the request can report them to their Supervisory Authority (…

So it looks like having a script to delete all user's data can get you out of trouble with any of these letters.

Re: Shutting Down Forum (GDPR)

#272

Post by jtbayly »

blub wrote: post #240
bigbugbag wrote: post #237

Earlier quoted context omitted.

Can you provide examples of websites shutting down due to GDPR ?

I only know about some US newspaper closing EU access and this guy's forum. I'm sure we'll get a separate thread for each site that's closing, to emphasize how the (advertising) world is ending, one just needs to wait.

There's no advertising on the forum under discussion.

Re: Shutting Down Forum (GDPR)

#273

Post by perlgeek »

antaviana wrote: post #270

Can you send a GDPR letter to a public body, for example, the Office for National Statistics? Can you ask them to delete your data? Should they comply or are they waived from GDPR compliance?

> Can you send a GDPR letter to a public body

I'm pretty sure you can.

> Can you send a GDPR letter to a public body

You can, for PII. One would hope they store their data anonymized.

> Should they comply or are they waived from GDPR compliance?

I think they'd need to make a pretty strong case for why they cannot anonymize your data for their work to get an exception.

Re: Shutting Down Forum (GDPR)

#274

Post by orf »

TekMol wrote: post #190
Animats wrote: post #175

I just sent a GDPR letter to a company in the UK, which is still part of the EU. I have one of their Android phones, and it came with a non-removable app. It appeared to just be a bookmark. One day that app woke up and sent me a notification asking me to visit a web site, which led to a SurveyMonkey form. So I sent the company a letter asking what data they have on me. It's going to be interesting to see what happens…

It's going to be interesting to see what happens. My bet: Nothing.

From the several requests I've made already, that seems unlikely.

Re: Shutting Down Forum (GDPR)

#275

Post by DanBC »

codedokode wrote: post #271
michaelbuckbee wrote: post #79

Earlier quoted context omitted.

The forum owner wasn't getting "compliance requests" he was receiving "subject data access requests". Those requests can be: - Please give me all my data - Please delete all my data - Please stop doing things (processing) my data Or some mix of all the above. A site owner (controller) has 30 days from receiving such a request to respond or the person making the request can report them to their Supervisory Authority (…

So it looks like having a script to delete all user's data can get you out of trouble with any of these letters.

But it's important to remember the GDPR doesn't give users a right to have all data deleted on request. Processors only have to delete data in certain situations.

For example, if you told the user why you collected the data, and you're still using it for that purpose, and you have a legitimate need to continue to do so then you don't need to delete the data. And there's an extra exemption for "exercising the right of freedom of expression and information".

https://gdpr-info.eu/art-17-gdpr/

Re: Shutting Down Forum (GDPR)

#276

Post by etatoby »

simion314 wrote: post #215
DoreenMichele wrote: post #46

I"m not really a fan of the GDPR. I don't think it really protects privacy. I think it just uses the power of the EU, a fairly big and strong organization, to intimidate the rest of the world to comply with laws that it really shouldn't have legal jurisdiction to enforce globally. I think this is a scary precedent to set that the biggest bully on the block can de facto enforce such standards because the rest of the w…

>If you want none of your personal info on the web, I have a suggestion: Don't participate in forums, social media, etc. I can visit site A and B, not put any of my data intentionally on them but still my data get be funneled to 25 third parties that know what I visited. So your point is don't use internet or turn of javascript and open each link in private windows and maybe use some proxyes or Tor

As a side note, using Brave browser with all protections turned on by default, including Javascript disabled, and re-enabling Javascript (2 clicks) only on the websites you care and trust enough to, has made my Web browsing experience incredibly better, especially on mobile.

Now everything loads in an instant, no more shenanigans that jump around the screen as I scroll, no Facebook/Twitter/Google buttons (that nobody even uses), no pop-up/in/out/over adverts, and even those asinine cookie warnings are gone by default!

I cannot recommend it well enough.

Re: Shutting Down Forum (GDPR)

#277

Post by tinco »

drivingmenuts wrote: post #98
subway wrote: post #47

Earlier quoted context omitted.

Despite all the bluster to the contrary, in the US we avoid accepting responsibility for our actions at all costs. To the point that business schools now effectively teach that the correct strategy is to put your fingers in your ears, and yell "la la la" until somebody actually smacks you.

The legal climate here is different. If you accept responsibility, you will be sued, by victims for possible monetary losses and/or by prosecutors for possible criminal liability. If you stonewall, you might get sued for (see previous) but you might not if it's too expensive. I don't know if it's a social thing or a legal thing or some combination or what, but apparently it's harder to sue in other parts of the world…

It's not harder, just less profitable.

Re: Shutting Down Forum (GDPR)

#278

Post by codedokode »

TomVDB wrote: post #195
synotna wrote: post #173

Earlier quoted context omitted.

Do you believe that hobbyists must not follow laws & regulations when they interact with the public?

Do you believe that anyone who has a hobby website with a forum needs an official privacy document, presumably vetted by a lawyer.

What if a forum owner receives a DMCA letter, or a letter from NSA? You do not really need to consult a lawyer to remove copyrighted material or something else that is illegal.

Re: Shutting Down Forum (GDPR)

#279

Post by jtbayly »

DanBC wrote: post #245
TomVDB wrote: post #194

Earlier quoted context omitted.

There’s a big difference between ignoring somebody’s privacy and having an official lawyered document that spells them out. I’m sorry that this is a distinction you weren’t able to make.

It doesn't have to be lawyered.

Excuse me? How in the world am I supposed to know if it is sufficient for GDPR without a lawyer?

Re: Shutting Down Forum (GDPR)

#280

Post by speedplane »

codedokode wrote: post #278
TomVDB wrote: post #195

Earlier quoted context omitted.

Do you believe that anyone who has a hobby website with a forum needs an official privacy document, presumably vetted by a lawyer.

What if a forum owner receives a DMCA letter, or a letter from NSA? You do not really need to consult a lawyer to remove copyrighted material or something else that is illegal.

A single DMCA notice is relatively easy to deal with. Even though a startup owner probably "should" consult with a lawyer, you don't need to if the take-down request is clear and the material is either clearly infringing or not. There are gray areas, but they are rare.

A letter from the NSA is a completely different story. You definitely need to hire a lawyer, probably an expensive one. One NSA letter could easily shut down a small startup.

Post reply on HN