Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

infoq.com

Post reply on HN
Print view View original

151–160 of 186 posts

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#151

Post by jen20 »

jtbayly wrote: post #147
mrweasel wrote: post #142

Earlier quoted context omitted.

That’s a weird attitude, at its core the GDPR is simply about keeping track of data, and ensuring that it’s not used for anything the users didn’t consent to. I’m having a hard time seeing how the rules could be any different. Remember that the GDPR is also result of companies looking at the cookie law and deciding “fuck it, let’s find a loop hole and not change anything”.

Oh, I don't know, maybe writing it so that it doesn't mean companies in the EU "basically have to cease all economic activity"? Or writing it so that it doesn't claim to tell me what I have to do with my website when I live in another jurisdiction. I laugh at GDPR. The EU can keep its bureaucracy to itself thank you very much. Making simple websites illegal and forcing me to hire a lawyer to figure out not what I'm a…

Companies in the EU need cease no legitimate economic activity. What one must do is seek consent of European citizens before using their data.

Those abusing personal information without consent deserve all the fines that can be thrown at them. I'd rather there were personal liability in the same manner as Title IX of Sarbanes-Oxley, but in the meantime, this is the best there is.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#152

Post by ChuckNorris89 »

runako wrote: post #150

The website of the German federal tax office is not GDPR-compliant: https://twitter.com/jdvhouten/status/1488481039630704644 Seems premature to sanction private businesses when EU governments have not yet been able to come fully into compliance. Perhaps the changeover is more difficult than anticipated? As others allude below, it might make sense for the relevant EU-based alternatives to come online/scale up.

>The website of the German federal tax office is not GDPR-compliant:

The German government is, in general, a joke when it comes to websites and doing things online instead of fax/mail/paper.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#153

Post by nix23 »

belter wrote: post #128
radicalbyte wrote: post #2

This is an excellent decision from the Austrian DPA: there is no good argument for exfiltrating data to a country with low-to-non-existent data-protection standards. It would be nice if the same logic applied to manufacturing and environmental legislation - it stops the race to the bottom.

Will make no difference for what really matters... "BND helped NSA to spy on Austria, EU partners: report" https://www.aa.com.tr/en/world/bnd-helped-nsa-to-spy-on-aust... "Alleged NSA post in Austria becomes state affair" https://apnews.com/a3537677459e41b9ba4d21d8208dd28a "UK, Dutch spy agencies curb intel flow to Austria over Russia ties: MP" https://www.reuters.com/article/us-austria-security-idUSKCN1... "Vienna I…

And then one wonders why the EU is such a *it-show ;)

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#154

Post by jtbayly »

jen20 wrote: post #151
jtbayly wrote: post #147

Earlier quoted context omitted.

Oh, I don't know, maybe writing it so that it doesn't mean companies in the EU "basically have to cease all economic activity"? Or writing it so that it doesn't claim to tell me what I have to do with my website when I live in another jurisdiction. I laugh at GDPR. The EU can keep its bureaucracy to itself thank you very much. Making simple websites illegal and forcing me to hire a lawyer to figure out not what I'm a…

Companies in the EU need cease no legitimate economic activity. What one must do is seek consent of European citizens before using their data. Those abusing personal information without consent deserve all the fines that can be thrown at them. I'd rather there were personal liability in the same manner as Title IX of Sarbanes-Oxley, but in the meantime, this is the best there is.

Then your argument is not with me, but with the privacy experts that BjoernKW mentioned:

> According to some privacy experts, even a third party just having a US-based supplier might be construed as a customer of that third party being in violation of GDPR, at which point we'd basically have to cease all economic activity.

That's the only thing I was really replying to here at the start.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#155

Post by cstpdk »

Puts wrote: post #144
belter wrote: post #128

Earlier quoted context omitted.

Will make no difference for what really matters... "BND helped NSA to spy on Austria, EU partners: report" https://www.aa.com.tr/en/world/bnd-helped-nsa-to-spy-on-aust... "Alleged NSA post in Austria becomes state affair" https://apnews.com/a3537677459e41b9ba4d21d8208dd28a "UK, Dutch spy agencies curb intel flow to Austria over Russia ties: MP" https://www.reuters.com/article/us-austria-security-idUSKCN1... "Vienna I…

At least it seems like the head of the Danish intelligence services is actually facing charges for helping the NSA spy on Swedish politicians: https://www.dw.com/en/danish-spy-chief-detained-over-highly-... But I think this more then anything shows why the US should not be regarded a country with adequate level of data protection. I would honestly just assume that they force Google to record every single meeting betw…

You got the charges wrong. It's speculation on my part because it's kept secret, but all journalists in Denmark more or less agree that he is held for leaking information on the NSA partnership and two other stories involving the intelligence agencies (one about an agent being left in jail in Spain and one about a withheld security assesment of refugees held in camps in Syria). This is based on which journalists got interrogated and what stories they have brought to light

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#156

Post by tremon »

BjoernKW wrote: post #96

I keep hearing that claim, yet it is never backed up by any substantive evidence or actionable advice as to which of these apparently abundant exclusively EU-based services to use for solving a particular problem. Well, other than the usual Fathom and Plausible, that is. It might come as a surprise to some, but the web and software in general isn't just comprised of analytics. Just to try and prove myself wrong I sea…

If FOSDEM, a pretty large but fully volunteer-run organization can host their own videos, why can't you?

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#157

Post by baxtr »

ATsch wrote: post #100
baxtr wrote: post #91

Earlier quoted context omitted.

I really don't understand the problem with Google analytics. Anyone who is able to explain that in easy terms? So they are collecting data about me to show me better ads. Isn't that what I want? They compare my data to a collection ("look-a-likes") of others that match my data fingerprint. What's wrong with that? The way I understand it nobody is interested in me as a person (which is a bit sad, but that's a differen…

The problem is not that it is possible but that it is done without consent or oversight.

Isn't that solved by cookie pop-ups? And: Why is it important to consent?

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#158

Post by perlgeek »

7steps2much wrote: post #9
rini17 wrote: post #8

Earlier quoted context omitted.

To me it reads as only walling the data off is insufficient. They will have to incorporate in Europe or in jurisdiction without FISA-like laws and completely split whole operation there.

I believe that it would come down to this as well. The problem is both them being located in the US AND being a US company. Alternatively they could mirror an approach that Microsoft had with ther Office Online for a while, that is find a European company acting as "trustee" for the data, so that even if the NSA came knocking the US based company would not have any data on any of their infrastructure it could give th…

I believe that Microsoft is already licensing Azure tech to big European companies to host GDPR-compliant, Azure-compliant regions in Europe. More expensive than regular Azure regions, but still in use for some purposes.

Given that the big 3 cloud providers already have some trouble providing stable operations, I suspect it won't be the pinnacle of reliability, but have no first-hand experience with them.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#159

Post by perlgeek »

the-dude wrote: post #40

I have read here on HN a comment which said the following : US companies will still be at an advantage as they can still mine their other customers and use this knowledge for their EU operations as well. EU based companies will not be allowed to mine US customers the same way.

How well does the insight from one region and culture to another?

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#160

Post by toast0 »

IgorPartola wrote: post #82
the-dude wrote: post #55

Earlier quoted context omitted.

Plenty? Or a handful?

Every restaurant, every taxi, every plumber you have ever interacted with did not make their money by selling your personal information. They did it by providing value in exchange for a fee. Google and Facebook are the exception to the rule. Sure in the category of free and very popular social networks and search engines this may be the norm, but that category consists of less than a dozen companies.

Probably because they don't have a good way to monetize. Lots of auto repair shops sell your personal information (mileage, condition of vehicle) to a data collection company that sells it to insurance companies (checking if miles driven is within the policy limits) and carfax/similar services. Of course, mechanics also charge a fee.
Post reply on HN