11–20 of 82 posts
As someone who doesn't deal with Europe much... CASL here in Canada seems to have similar rules. Would following CASL automatically mean it follows GDPR?
As somebody who has hated spam for years, I can only wish that I were in the EU. There is a whole swathe of companies that is somewhere between casual and negligent with email addresses, and it would be my distinct pleasure to have a stick like GDPR to beat them with.
Laws like this are broad and overreaching, but they are rarely enforced.
> Part of this opt-in verification process must include clear documented proof that the person opted in with a full understanding of what they were signing up to. Does anyone have any idea how to actually do that? How do I prove that a given user actively checked a box?
I have been using the last 6 months documenting all of our company's processes that handle customer interaction and data (which is basically all our processes), created flowcharts of how data moves between us, third part providers and customers as well as creating a document for each of these flowcharts that pinpoint exactly how we are complying with GDPR for every sub-process.
If for nothing else, we now have a total overview of what we do and how we do it - in an easily shareable collection of visualisations and documentational material.
As somebody who has hated spam for years, I can only wish that I were in the EU. There is a whole swathe of companies that is somewhere between casual and negligent with email addresses, and it would be my distinct pleasure to have a stick like GDPR to beat them with.
Sorry to break it to you, but having live both in EU, and now in the US, I still got more email spam from France. Laws like this are broad and overreaching, but they are rarely enforced.
> Part of this opt-in verification process must include clear documented proof that the person opted in with a full understanding of what they were signing up to. Does anyone have any idea how to actually do that? How do I prove that a given user actively checked a box?
Of course, from a security standpoint where the attacker is assumed to be totally untrustworthy, this is all nonsense since it would be trivial to fake. It does require a certain amount of trust that the company that will not stoop to faking documents.
I guess you could continue the charade by putting timestamped screenshots on a blockchain :-)
> Part of this opt-in verification process must include clear documented proof that the person opted in with a full understanding of what they were signing up to. Does anyone have any idea how to actually do that? How do I prove that a given user actively checked a box?
Like T&Cs, everybody knows that most people don't read them. Nobody's going to start quizzing their user, so what's a reasonable compromise? Forcing the user to at least scroll through some (or all) of it before agreeing. You make it clear that the intention is for you to read it, and that you're agreeing to something you should have read.
As somebody who has hated spam for years, I can only wish that I were in the EU. There is a whole swathe of companies that is somewhere between casual and negligent with email addresses, and it would be my distinct pleasure to have a stick like GDPR to beat them with.
Sorry to break it to you, but having live both in EU, and now in the US, I still got more email spam from France. Laws like this are broad and overreaching, but they are rarely enforced.
As somebody who has hated spam for years, I can only wish that I were in the EU. There is a whole swathe of companies that is somewhere between casual and negligent with email addresses, and it would be my distinct pleasure to have a stick like GDPR to beat them with.
So everyone will get at least some benefit. But ya, it'd be great if other governments took this as seriously.
Earlier quoted context omitted.
Sorry to break it to you, but having live both in EU, and now in the US, I still got more email spam from France. Laws like this are broad and overreaching, but they are rarely enforced.
The GDPR won't be implemented for another month and a half.
It is just now becoming enforced (with all its sanctions), after the two-year transition period.