Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CCPA goes into effect January 1, but nobody’s sure how the new rules work

latimes.com

Post reply on HN
Print view View original

81–90 of 129 posts

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#81

Post by unstatusthequo »

Some people understand it. We have dug in deep because companies are turning to us to interpret it. Here’s our resource to learn in case anyone is interested.

https://www.globalprivacywatch.com/tag/ccpa/

Note since these were originally published, the big thing that changed is that employees and employees of clients and vendors are now generally exempt from the CCPA. There is still a general notice obligation (think short privacy policy) for your employees, but that is about it. They also tightened up the FCRA and GLB exceptions, but those are not generally relied on by the majority of businesses out there.

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#82

Post by bsder »

esotericn wrote: post #8
username90 wrote: post #5

How are these different from GDPR? Most global companies should already have most of this in place, so it will just hurt the small businesses which has yet to expand outside the states. Is there some limit to company size here to avoid that?

You mean like all of the US news sites that just firewall off EU citizens at the moment?

Then start an EU competitor that doesn't--most US news sites are simply repackaging content anyway.

You should clean up, no?

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#84

Post by esotericn »

bsder wrote: post #82
esotericn wrote: post #8

Earlier quoted context omitted.

You mean like all of the US news sites that just firewall off EU citizens at the moment?

Then start an EU competitor that doesn't--most US news sites are simply repackaging content anyway. You should clean up, no?

Did you read the post above mine?

> How are these different from GDPR? Most global companies should already have most of this in place

There are tons of companies, global or not, that don't have it in place. They won't be able to deal with it by firewalling off their home market.

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#85

Post by ailideex »

lidHanteyk wrote: post #68
narag wrote: post #56

Earlier quoted context omitted.

This is not a good thing indeed, because it's terribly naive. Passing a law that more or less forbid huge companies the very same activity that gets them the bread and butter. What are they expecting to happen? That the companies will surrender their business, just as that?

Yeah, that's basically how it should happen. In California, there's ample precedent for taking products off of the market when they're shown to harm consumers, and if that happens to kill off manufacturers who aren't diversified, then so be it. Are you really going to be sad if Facebook can't survive CCPA?

> Are you really going to be sad if Facebook can't survive CCPA?

Most people I know would be.

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#86

Post by mehrdadn »

cyphar wrote: post #80
dependenttypes wrote: post #52

Earlier quoted context omitted.

Never understood the cookie popups mess. I remember back in the ages of internet explorer it showed a popup when a site tried to use cookies, why do the sites need to implement the cookie popups rather than let the users configure it in their browsers?

It's a classic example of a legislative loophole. What the cookie law was actually trying to do was provide a way for users to opt-out of cookie-based tracking. But, someone figured out that if you just ask for permission to use cookies (for any reason) and refuse service if the opt-out, you'd still be following the letter of law (but not the intent). Arguably, this is one of the reasons why the GDPR was necessary.

> if you just ask for permission to use cookies (for any reason) and refuse service if the opt-out

Is that even true? If I never consent do I get no cookies left on my browser?

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#87

Post by bsder »

esotericn wrote: post #84
bsder wrote: post #82

Earlier quoted context omitted.

Then start an EU competitor that doesn't--most US news sites are simply repackaging content anyway. You should clean up, no?

Did you read the post above mine? > How are these different from GDPR? Most global companies should already have most of this in place There are tons of companies, global or not, that don't have it in place. They won't be able to deal with it by firewalling off their home market.

And my point is that I don't see EU competitors jumping into the gap left by companies that simply firewall off the EU.

Now, it could simply be that everybody is waiting to see if the GDPR enforcement is going to become aggressive before doing so. There is no point in trying to compete with an entrenched US company until the EU actually neuters them.

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#88

Post by bcrosby95 »

ailideex wrote: post #76
alkonaut wrote: post #75

Earlier quoted context omitted.

No. Things you need to do to make the site/service function at all such as your login cookies or shopping carts don’t count. Non essential cookies is what it’s about. Sadly, some sites seem to interpret that (incorrectly) as “well out business is to show news paid for by ads so the ad network cookies are essential”. These are the players I wish would be fined out of business.

Just for interest sake, do you ever read news on the internet, and if so how do you pay for it? I personally read a lot of news online, most of it is such utter trash that I would not want to pay for it. I have paid for some specific sites intermittently - currently I pay about $20 USD a month to one specific content creator that produces news content - but that is mostly because it is rather niche news that nobody e…

Websites don't need to use personalized ads.

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#89

Post by ramshorns »

manigandham wrote: post #63
ocdtrekkie wrote: post #59

Earlier quoted context omitted.

Fundamentally, the solution to cookie warning spam is simple: Stop letting these companies disclaim their way out of unethical business practices. Start making those business practices illegal and shut down companies built around them. Companies built on surveillance capitalism should be shut down. Full stop.

What business practices? Cookies aren't just used for ads. You could get rid of adtech and not have any change in cookie notices because of how the laws are written.

I think the GP is suggesting that the laws should be written differently.

Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work

#90

Post by Chris_Chambers »

tomc1985 wrote: post #17
derision wrote: post #11

Earlier quoted context omitted.

It's good that one state can force it's hand over the other 49?

When the other 49 stand still and do nothing regarding the business-data-orgy-that-needs-to-end, yes Data should never have been a gold rush and we should be more keen to kill it

This is only progressive if you retroactively punish the companies that benefited from the lax laws as if they were violating these new laws all along. Otherwise this is just pulling up the ladder for new competitors.
Post reply on HN