American Data Privacy and Protection Act • Hacker News Board

Re: American Data Privacy and Protection Act

#101

Post by legitster » Thu, Sep 22, 2022, 5:09 PM UTC

colpabar wrote: post #24

drstewart wrote: post #12

Earlier quoted context omitted.

This is normal: https://www.techrepublic.com/article/how-to-request-your-per... >Although, the ICO also notes that a firm may charge a “reasonable fee” when “a request is manifestly unfounded or excessive, particularly if it is repetitive.” Privacy request shouldn't enable mechanisms of denial of service type attacks against companies.

> Privacy request shouldn't enable mechanisms of denial of service type attacks against companies. How would this even happen? I genuinely don't understand what you mean.

For our company, all privacy requests are handled manually by a team I am on. We manually do name searches in about a dozen platforms to see if there are any matching records.

4/5 times there aren't any - people doing the requests often use services that submit blanket requests.

Re: American Data Privacy and Protection Act

#102

Post by legitster » Thu, Sep 22, 2022, 5:12 PM UTC

prego_xo wrote: post #7

> (B) any time beyond the initial 2 times described in subparagraph (A), may allow the individual to exercise such right for a reasonable fee for each request. Paying any sum of money to receive a copy of or request to delete my private data is unreasonable in nature.

I mean, at our company, GDPR requests have to cost at least $50 a pop. It goes to a human team to review and process with a dedicated legal representative.

Re: American Data Privacy and Protection Act

#103

Post by bdougherty » Thu, Sep 22, 2022, 5:15 PM UTC

matai_kolila wrote: post #43

hatware wrote: post #5

Quoted post unavailable.

I can't remember the last time I saw a non-iroinic reference to 1984. Have you read the book? It's nothing at all like how we live today, and (as far as I can tell) this would do nothing towards making our lives more like how the lives of Winston and Julia were in the novel.

Telescreen, newspeak, mass surveillance, perpetual war, "officials" acting as if what they are saying now is always what they said, etc. It's almost easier to list the things that we don't have in common.

Re: American Data Privacy and Protection Act

#104

Post by olyjohn » Thu, Sep 22, 2022, 5:16 PM UTC

legitster wrote: post #102

prego_xo wrote: post #7

> (B) any time beyond the initial 2 times described in subparagraph (A), may allow the individual to exercise such right for a reasonable fee for each request. Paying any sum of money to receive a copy of or request to delete my private data is unreasonable in nature.

I mean, at our company, GDPR requests have to cost at least $50 a pop. It goes to a human team to review and process with a dedicated legal representative.

Not my problem. You're the one collecting the data. You pay for the costs. Can't afford to collect my data? Go out of business then.

Re: American Data Privacy and Protection Act

#105

Post by legitster » Thu, Sep 22, 2022, 5:16 PM UTC

uni_rule wrote: post #91

donatj wrote: post #50

Now if we could just get a bill that actually limited the governments ability to collect data on its citizens. I'm not really worried about targeted ads, I'm worried about targeted assassinations. You talk to people and ask them why they are worried about companies collecting data, and a certain percentage will tell you they don't like that the government could get it with a court order. That'd be a HUGE improvement…

That is incredibly shortsighted considering one of the prime ways the US Government skirts protections against domestic data collection is by simply buying it from private entities.

There's a large difference though between what governments could presumably buy from ad trackers or data warehouses and what they can get by intercepting unencrypted web traffic at the ISP level.

Re: American Data Privacy and Protection Act

#106

Post by pessimizer » Thu, Sep 22, 2022, 5:17 PM UTC

donatj wrote: post #50

Now if we could just get a bill that actually limited the governments ability to collect data on its citizens. I'm not really worried about targeted ads, I'm worried about targeted assassinations. You talk to people and ask them why they are worried about companies collecting data, and a certain percentage will tell you they don't like that the government could get it with a court order. That'd be a HUGE improvement…

They only need a court order (which can be from a secret court providing secret guidance, and can be a infinite standing order that covers vast amounts of arbitrary collection AUMF-style) to force companies to turn things over. Companies can just hand your data over because they don't want to be retaliated against (or in return for favors), and nobody needs a warrant, nobody ever has to tell anyone. Depending on agency internal rules, they may not even have to keep a record themselves of having done it (if they break their rules, they'll be responsible for punishing themselves though, I'm sure they'll be harsh.)

That's your targeted ads (and your cellphone tracking, and your transaction records.)

Re: American Data Privacy and Protection Act

#107

Post by throwaway71271 » Thu, Sep 22, 2022, 5:18 PM UTC

matai_kolila wrote: post #43

hatware wrote: post #5

Quoted post unavailable.

I can't remember the last time I saw a non-iroinic reference to 1984. Have you read the book? It's nothing at all like how we live today, and (as far as I can tell) this would do nothing towards making our lives more like how the lives of Winston and Julia were in the novel.

when people say '1984' they dont always mean Winston and Julia, sometimes they mean the Proles.

> If there is hope, wrote Winston, it lies in the proles.

https://www.abhaf.org/assets/books/html/1984/47.html

Re: American Data Privacy and Protection Act

#108

Post by legitster » Thu, Sep 22, 2022, 5:18 PM UTC

gigel82 wrote: post #21

Can't read legalese much, and -judging by how these things tend to go- I bet it's butchered beyond recognition before it gets to a vote (if at all). Instead, we should consider a constitutional amendment that enshrines digital privacy as a fundamental human right.

> digital privacy as a fundamental human right

Why would digital privacy be a fundamental human right before normal privacy?

Re: American Data Privacy and Protection Act

#109

Post by pessimizer » Thu, Sep 22, 2022, 5:19 PM UTC

chronotis wrote: post #2

Ten years or so ago, I was participating in a small business roundtable discussion with one of our state senators. At the time, I ran a consumer research agency and would often have multinational projects involving consumer data collection in both the US and EU; this is before GDPR had become ratified, but Safe Harbor was failing and there was ambiguity about what the future state would look like. Of the 15 or 20 bus…

> Would never clear filibuster.

A filibuster by who? Neither party would support any privacy rules that placed any undue importance on privacy.

Re: American Data Privacy and Protection Act

#110

Post by notinfuriated » Thu, Sep 22, 2022, 5:20 PM UTC

uni_rule wrote: post #91

donatj wrote: post #50

Now if we could just get a bill that actually limited the governments ability to collect data on its citizens. I'm not really worried about targeted ads, I'm worried about targeted assassinations. You talk to people and ask them why they are worried about companies collecting data, and a certain percentage will tell you they don't like that the government could get it with a court order. That'd be a HUGE improvement…

That is incredibly shortsighted considering one of the prime ways the US Government skirts protections against domestic data collection is by simply buying it from private entities.

Pretty sure everyone who wants gov data collection of private individuals would want this to be illegal as well.

I'm disappointed to find most of the complaining on this thread about businesses collecting personal data, rather than the government. Even more so that the first comment's top response regarding this is shooting it down because of an imagined loophole.

It disgusted me about CCPA that a private company can have a breach and be fined millions, but the CA govt is immune. Same thing here, and it should disgust everyone who supposedly cares about privacy.