Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

UK to depart from GDPR

lawgazette.co.uk

Post reply on HN
Print view View original

501–510 of 659 posts

Re: UK to depart from GDPR

#501

Post by nolok »

kergonath wrote: post #481
JumpCrisscross wrote: post #457

Earlier quoted context omitted.

> Developers have to have mechanisms in place to delete gdpr data when required and not store data that's not required for you goals Purely anecdote, but zero companies I know in Germany, Italy or France are doing this. (The ones in Switzerland are.) There is a cosmetic fix that produces an email so there is something to show a regulator if they come knocking. The logic being investing anything more than that is a cr…

French companies do this. They did it before GDPR mostly.

Agreed, the right to access/change/delete any and all information a company stores on you predates GDPR by decades in France. It's not a new thing.

Re: UK to depart from GDPR

#502

Post by downandout »

m12k wrote: post #115

‘too many businesses and organisations are reluctant to use data – either because they don’t understand the rules or are afraid of inadvertently breaking them’ TBH I'm glad companies stay away from my data if they don't know how to get consent, store data securely, or even what those things mean.

TBH I'm glad companies stay away from my data if they don't know how to get consent, store data securely, or even what those things mean.

“Storing data securely” and “getting consent” are both wildly different from full compliance with the onerous requirements of GDPR. You can do both of these things in absolute good faith and still be in violation. Unless you have a team of legal scholars working for you, odds are that you are in violation of at least one provision of this massive, unwieldy legislation - no matter how respective of user privacy you are.

That is why the UK is abandoning it. GDPR, as written, is a business-killing mess.

Re: UK to depart from GDPR

#503

Post by ciceryadam »

Nursie wrote: post #257
gmac wrote: post #207

Earlier quoted context omitted.

OK, so the problem is that I find it basically impossible to understand how a well-informed and rational person could come to the conclusions you've come to. The EU isn't perfect, but you'll struggle to argue that it hasn't expanded peace, prosperity and human rights across the continent. This is motherhood-and-apple-pie stuff. Arguments in favour of Brexit thus tend to boil down to immigration and 'sovereignty'. The…

> The EU isn't perfect, but you'll struggle to argue that it hasn't expanded peace, prosperity and human rights across the continent. Is it necessary for the UK to stay in for this peace to continue? Would you like to talk to some of the southern states about the expansion of prosperity that has come along with monetary union? > There's a consensus amongst economists that immigration makes us financially better off.…

> Is it necessary for the UK to stay in for this peace to continue?

Maybe - https://en.wikipedia.org/wiki/Good_Friday_Agreement#Brexit

Re: UK to depart from GDPR

#504

Post by thwarted »

devonbleak wrote: post #446
switch007 wrote: post #372

Earlier quoted context omitted.

I have never observed a non-techie do anything other than blindly click the call to action (i.e. agree to everything). The entire scheme seems sneakily designed to actually encourage users to give more and explicit consent, avoiding the situation where consent was a grey area. It seems to have been spun to a great extent.

My biggest annoyance lately is having to go set my cookie preferences on every. single. site. If only there was some sort of browser standard that I could set in the preferences there and sites would just obey it....

Remember P3P?

https://en.m.wikipedia.org/wiki/P3P

Re: UK to depart from GDPR

#505

Post by dtx1 »

JumpCrisscross wrote: post #457
joostdevries wrote: post #453

Earlier quoted context omitted.

Are you in the EU? I'm a developer in the EU and that is patently not true. Developers have to have mechanisms in place to delete gdpr data when required and not store data that's not required for you goals. In my experience gdpr puts a real and meaningful curb on the strong impetus to gather everything and sell it.

> Developers have to have mechanisms in place to delete gdpr data when required and not store data that's not required for you goals Purely anecdote, but zero companies I know in Germany, Italy or France are doing this. (The ones in Switzerland are.) There is a cosmetic fix that produces an email so there is something to show a regulator if they come knocking. The logic being investing anything more than that is a cr…

That's great news if any of these companies cannot or won't reply to your GDPR Deletion Request you can grab a default payment of at least 1k Euro just for that. Please name them, maybe i hit the jackpot with one of them

Re: UK to depart from GDPR

#506

Post by cranekam »

gadders wrote: post #461
pydry wrote: post #302

Earlier quoted context omitted.

>For example you think everyone else thinks the NHS is awesome, because left-wing journalists Or because 87% of Britons polled said that they are very proud of it. >you'd be shocked at how little support rail nationalisation would end up having. 56% in favor. 15% actively against. Majority support even by members of the party that was most against it. >The NHS is a socialist anachronism This is a popular view among i…

Let's not forget that approximately 20% of all UK COVID cases were caught in hospital. Not exactly the envy of the world. FWIW, I think we should keep the NHS and have it free at point of use. However, I don't really care how that service is provided - government employees, private, whatever - as long as the service is good.

> Let's not forget that approximately 20% of all UK COVID cases were caught in hospital. Not exactly the envy of the world.

Do you have a source for this? How does it stack up against other countries? Is it possible a greater share of people were hospitalised and thus the number of infections at hospitals was higher as a result?

Re: UK to depart from GDPR

#507

Post by kmeisthax »

Nursie wrote: post #276
Chmouel wrote: post #235

Earlier quoted context omitted.

As someone who was doing the other way around (hey dan!) working in australia coming from france i always find it weird how australian could accepts almost everything from the government with not much contestation, I remember when there was a law who passed thru in Australia where every small company could fire anyone on the day (it wasn't the case before, i think there was a 3 month period or something). The law pas…

Honestly I think France is somewhat exceptional there, with the rioting for workers rights. I'm not saying it's a bad thing, but it does seem unusually French. From what I can tell the workers rights situation in France really does dissuade some companies from setting up there.

France's exceptionalism was that people had time to riot. Most countries drown their precariat in work and cortisol. France has shorter weekdays so even well-to-do people can protest. This is no longer exceptional to France; the pandemic has dramatically increased the number of Americans who are both unemployed and have the resources to protest. That's why we get riots every few months and why those riots are not unique to one particular political movement anymore.

Re: UK to depart from GDPR

#508

Post by j-pb »

bornelsewhere wrote: post #65
piokoch wrote: post #28

For me the biggest flaw of GDPR that it does not distinguish between something done as a business to make money and something done non-profit, as a hobby project, etc. GDPR killed forums, etc. everything moved to Facebook groups, where people agree to whatever Facebook wants. Who will create forum for a community if one has to deal with all the bureaucracy, "right to be forgotten", data accuracy checks, data export r…

If you do not have resources to take care of PI then perhaps do not gather and store it in the first place? Forums do not necessarily require personal information to exist.

Except that a commonly used user name is already "personal information". And your eMail address you've used to register to the forum. And the IP address that you use to access the forum.

AND EVEN THE RANDOM UUID THAT YOU ASIGN TO USERS ON YOUR FORUM BECAUSE YOU'VE GIVEN UP AND ONLY IDENTIFY USERS BY THAT AND THEIR PASSWORD.

In effect everything where a user has to input something instead of being just a recipient, or where the user is connected to any persistent identifier contains PI according to GDPR.

Say bye bye to most kinds of technical server logs used to debug stuff, to your database, and storing stuff in general.

The only way to be truly GDPR compliant if you followed the law to the letter would be to just provide TV and Teletext service via radio waves.

Re: UK to depart from GDPR

#509

Post by smartbit »

M2Ys4U wrote: post #471
sdfhbdf wrote: post #177

‚Meanwhile one of the architects of the GDPR, German MEP Axel Voss, last week called for the regulation to be updated to take into account developments such as blockchain technology...’ What does that have to do with personal data? Sounds like keyword stuffing

Axel Voss wasn't even one of the GDPR's architects. He was trying to kill it before it was born.

Documentary Democracy: Im Rausch der Daten (2015) [0] gives insight in the some of the main characters during the GDPR negotations. It films behind closed doors where the real negotiations took place. Highly recommended for anyone interested in EU politics and in particular for those with interest in privacy.

Quotes from Alex Voss in today’s Financial Times [1]

[0] https://www.imdb.com/title/tt5053042/

[1] https://archive.is/P1gqZ

Re: UK to depart from GDPR

#510

Post by drstewart »

Kim_Bruning wrote: post #252
klingon78 wrote: post #205

Earlier quoted context omitted.

The US has a similar privacy law in California they must support, and many companies have presence globally, so they are having to deal with this in the following ways, like many others. GDPR has given a 50M EUR handslap to Google and similar to some other large companies[1] while seriously hurting smaller companies with existing custom web applications for whom they may not even have someone on staff to modify those…

It's actually fairly easy to be GDPR compliant almost by default, TBQH. It either takes a lot of effort or a lot of laziness to somehow end up non-compliant.

If "by default" you mean starting from ground zero, that's an almost meaningless statement.

If the government passed a law requiring all housing to be be built to code to survive a magnitude 9 earthquake in a region where there are no earthquakes, and every house needs to be retrofitted, would you say the burden is low? After all, if you start from scratch without a house there is no requirement to do anything! And building a new house is much easier, after all!

Post reply on HN