181–190 of 210 posts
Earlier quoted context omitted.
If you don't store user data none of those applies. If you do want to store the data, those just specify what and how with enough detail that battalion of Facebook lawyers can't go around it. It's mostly sensible when you get around to implementing it. For example if you store data for say CCTV purpose, you have to tell people they are being monitored, for what reason, who administers the data etc. Article 6 covers f…
And a small EU salesmen had to shut down because he was using Shopify…
I see sites all the time that use shopify at checkout to handle the sensitive financial data. That's literally what they do for their clients.
Earlier quoted context omitted.
Of course, because vast variety of businesses had no security whatsoever and a bunch of PII could just be accessed by anyone on file share. Vast majority of cases are "we haven't even tried in the first place" And majority of fines are in range of 4 to low 5 digit. At least from what I observed the "mistakes" are generally fined pretty low if organization can prove it took necessary steps in goodwill, but stuff like…
One of the small businesses in question wanted to use Shopify and got fined.
Citation needed. Who? This example seems very fictional, as shopify operates in the EU - there is no fine for simply "use shopify". "handle the sensitive financial data". is literally what such services do for their clients.
Earlier quoted context omitted.
Feelings from whom? Because for sure that's a very common feeling in Europe about EU regulations. It was a big part of the political campaigning around Brexit, even. You even admit this - nobody feels this way, except for the people who very strongly feel that way but their feelings are "FUD" so don't count?
it is literal fear, uncertainty, and doubt. GDPR often gets blown out of all proportion by people who seem to have a vested interest in having the regulation scrapped. This played out the same with the EU cookie directive which was intended to give people consent on how they were tracked- with massive carve outs for legitimate use, the intention was that people would cut down on that tracking to avoid needing a popup…
- The penalties are massive: fear
- The wording is vague: uncertainty
- What to do is unclear: doubt
That's entirely on the EU. I have no vested interest in GDPR one way or another at the moment and yet having been involved in assessment projects in the past, it is a crap law that makes the EU look incompetent and stupid. Nobody can figure out what the hell it means in all kinds of common scenarios. HN is full of people saying it's simple; I have yet to encounter any of these people inside actual enterprises, doing actual implementations of it. People who think it's easy are invariably eurofans engaging in wishful thinking.
> the intention was that people would cut down on that tracking to avoid needing a popup; but ended up in some form of malicious compliance
That's not how it was. The EU passed an incompetent law with unclear goals that kills the ability to do business of anyone who doesn't implement the banners. Cookies are in fact necessary, not optional, not nice to have. They are required. Thus everyone implements the banners, the internet got worse, the EU now looks foolish in front of the world and yet can't accept it.
Earlier quoted context omitted.
Then use provider that respects privacy. You guys would give up your rights for a pack of chips..
It’s funny for someone to claim that we would give up our rights when you are begging the government to limit your choices instead of using your own free will to choose based on your priorities. The EU is constantly taking away your right to choose which companies you want to use and it’s being celebrated
This is the "pro-crack-den" argument. Boring, boilerplate libertarian dogma. Not suitable for use in the real world.
Earlier quoted context omitted.
it is literal fear, uncertainty, and doubt. GDPR often gets blown out of all proportion by people who seem to have a vested interest in having the regulation scrapped. This played out the same with the EU cookie directive which was intended to give people consent on how they were tracked- with massive carve outs for legitimate use, the intention was that people would cut down on that tracking to avoid needing a popup…
GDPR creates a lot of FUD because: - The penalties are massive: fear - The wording is vague: uncertainty - What to do is unclear: doubt That's entirely on the EU. I have no vested interest in GDPR one way or another at the moment and yet having been involved in assessment projects in the past, it is a crap law that makes the EU look incompetent and stupid. Nobody can figure out what the hell it means in all kinds of…
If you read it, it's really clear: if you're not sending information to third parties then it's exceptionally easy to be compliant. A lot of things are "to best effort" which puts the burden of proof on the prosecution that you were grossly negligent.
There is a dedicated website to explaining the regulation for dummies; https://gdpr.eu -- the entire thing is 11 chapters, half of that is for governments to harmonise their national regulations to be GDPR compliant without people needing to invoke "GDPR", the remainder is a mix of common sense and ensuring digital privacy and consent. It's really clear for a legal document.
I should know, it's my part of job to read them and to ensure my company is compliant. It's not hard. The most loud people about this are lawyers who have a financial incentive to make it as hard as possible.
Earlier quoted context omitted.
And a small EU salesmen had to shut down because he was using Shopify…
Citation needed, who is this non-existent salesman? I see sites all the time that use shopify at checkout to handle the sensitive financial data. That's literally what they do for their clients.
Earlier quoted context omitted.
It’s funny for someone to claim that we would give up our rights when you are begging the government to limit your choices instead of using your own free will to choose based on your priorities. The EU is constantly taking away your right to choose which companies you want to use and it’s being celebrated
> you are begging the government to limit your choices instead of using your own free will to choose based on your priorities This is the "pro-crack-den" argument. Boring, boilerplate libertarian dogma. Not suitable for use in the real world.
Earlier quoted context omitted.
GDPR creates a lot of FUD because: - The penalties are massive: fear - The wording is vague: uncertainty - What to do is unclear: doubt That's entirely on the EU. I have no vested interest in GDPR one way or another at the moment and yet having been involved in assessment projects in the past, it is a crap law that makes the EU look incompetent and stupid. Nobody can figure out what the hell it means in all kinds of…
The problem is, everyone talks about the GDPR but they don't actually read it. If you read it, it's really clear: if you're not sending information to third parties then it's exceptionally easy to be compliant. A lot of things are "to best effort" which puts the burden of proof on the prosecution that you were grossly negligent. There is a dedicated website to explaining the regulation for dummies; https://gdpr.eu --…
Even basic things like backups are made unclear by GDPR! Truly, a more incompetent piece of legislation is hard to find. The only people who disagree on this are people who have hopelessly naive views of what regulators are like, and assume they'll always be friends. Nope. You have to read these rules as if the people who are enforcing them are completely unreasonable sadists. The lawyers understand that, you don't, so I hope you aren't in a position where you may lose your job in case of GDPR violations.
Earlier quoted context omitted.
One of the small businesses in question wanted to use Shopify and got fined.
> One of the small businesses in question wanted to use Shopify and got fined. Citation needed. Who? This example seems very fictional, as shopify operates in the EU - there is no fine for simply "use shopify". "handle the sensitive financial data". is literally what such services do for their clients.