Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook urged to make GDPR its “baseline standard” globally

techcrunch.com

Post reply on HN
Print view View original

111–120 of 236 posts

Re: Facebook urged to make GDPR its “baseline standard” globally

#111

Post by annabellish »

j32fun wrote: post #58
taylorswift_ wrote: post #50

Is anyone talking about the harmful effects on startup companies that may want to create new social platforms to compete against the incumbent players? All the talk about regulating facebook, twitter, etc are actually great for those companies because they can afford compliance. But it raises the bar of entry so high that new companies wouldn't be able to compete since with limited resources they wouldn't be able to…

I think a few blogs have touched on this: * https://www.linkedin.com/pulse/nightmare-letter-subject-acce... * https://www.smashingmagazine.com/2018/02/gdpr-for-web-develo... * https://wtfuh.com/2018-04-09/gdpr-has-a-few-problems/ * https://pagefair.com/blog/2018/granular-gdpr-consent/

I kind of feel like every question in the first link is entirely reasonable and people _should_ be able to get those answers, though. Nothing in there is onerous if you're following good practices anyway.

I really feel like the answers to all of those questions are going to be basically identical between people, and all you really need to do is be able to export whatever data you have on somebody quickly in order to be able to respond to that email in under quarter of an hour.

I guess it could make a decent DoS tactic against a small company, but lots of other things would too.

Re: Facebook urged to make GDPR its “baseline standard” globally

#112

Post by taylorswift_ »

mannschott wrote: post #94
taylorswift_ wrote: post #76

Earlier quoted context omitted.

can social media kill you though? I mean all this talk of regulating social networks is under the assumption that it's something you need to have. I would argue that safe shelter is a true human need, but posting cat gifs or pictures of drunken escapades or political musings does not seem equally comparable and thus I do not see how regulation does anything other than hamper competition.

> can social media kill you though? I assume you're aware of this: https://techcrunch.com/2018/03/13/un-says-facebook-is-accele...

I don't think it's an equal comparison... the effects of social media on societies is a somewhat subjective matter. It's more likely that social media is just another tool that exposes the underlying human nature.

That said, if a fire occurs in my shelter and I don't have sprinklers installed, I could die.

Re: Facebook urged to make GDPR its “baseline standard” globally

#113

Post by pluma »

sakabaro wrote: post #93
PunchTornado wrote: post #81

Earlier quoted context omitted.

"our companies"? Facebook isn't only a US company. Facebook Ltd is a UK company and they have many more companies around the world. If you want to operate in UK and generate revenues there then Facebook Ltd must follow UK laws.

GDPR is more overeaching than that. You don’t need physical presence in EU to be subject to it. In theory, just having a webserver storing access logs (default of Apache and Nginx) makes you infringing it as EU IPs are now considered personal data.

Yeah and unless you don't business in the EU as an EU entity, you can pay just as much attention to that as EU companies who don't do business in the US as a US company pay to the trainwreck that are American software patents.

Re: Facebook urged to make GDPR its “baseline standard” globally

#114

Post by rmc »

ggregoire wrote: post #19

"[any big US tech companies] Urged to Adopt GDPR Globally as a Standard" As an European living abroad, I still have no idea if I will be protected by the GDPR. I read at least 2 opposite answers on HN on the last days: "yes because you are a EU citizen", "no because it's where you are when the data are collected that matters".

GDPR doesn't have a citizen requirement, only residency. The word "citizen" doesn't appear in the law at all!

Art 3 of the GDPR ( https://eur-lex.europa.eu/eli/reg/2016/679/oj ) explains all. It's only when one of the person , or the company, is in the EU (or maybe EEA). So EU citizens in the USA aren't covered.

Re: Facebook urged to make GDPR its “baseline standard” globally

#115

Post by leesalminen »

maaaats wrote: post #62
taylorswift_ wrote: post #50

Is anyone talking about the harmful effects on startup companies that may want to create new social platforms to compete against the incumbent players? All the talk about regulating facebook, twitter, etc are actually great for those companies because they can afford compliance. But it raises the bar of entry so high that new companies wouldn't be able to compete since with limited resources they wouldn't be able to…

Read about what GDPR actually entails. Following it should be simple for a new player.

What about deleting data in backups for an EU resident who submitted a request for data deletion? If a company is using mysqldump or equivalent it seems difficult to just drop certain records from those .sql files.

Re: Facebook urged to make GDPR its “baseline standard” globally

#116

Post by taylorswift_ »

TAForObvReasons wrote: post #88
arkh wrote: post #78

Earlier quoted context omitted.

But how can you have enough user-growth to get vast amount of money from investor if you can't play fast and loose with the data you collect on your users? Fuck the users! They're not the clients.

You forgot the key Silicon Valley ethos: "Move fast and break things", where things include ethics and users' privacy expectations

Well the world has changed clearly. When facebook/myspace started out, would they have been able to achieve success if they were bogged down with data privacy compliance?

Re: Facebook urged to make GDPR its “baseline standard” globally

#117

Post by pluma »

sakabaro wrote: post #80
ggregoire wrote: post #41

Earlier quoted context omitted.

Sadly I've seen this comparison so many times this last week on HN. Seems like common sense leaves some people when we talk about their country.

You are making the wrong assumptions. I am a EU citizen, but live in the US. I will vote in an heartbeat for a 1st amendment like in an Europe law. You just don’t see how Europe speech is reatricted, and how laws like GDPR contributes to it.

I'm an EU citizen and I disagree, so I guess that's just, like, your opinion, man.

Re: Facebook urged to make GDPR its “baseline standard” globally

#118

Post by [deleted] »

quantumwoke wrote: post #95
tzs wrote: post #52

Earlier quoted context omitted.

Roughly: def GDPR_applies(company, person): if in_EU(person): return True if in_EU(company): return True return False There are various conditions, limitations, and exceptions that make the above not fully accurate, but its a good first approximation. You can read the actual text of the territorial scope rule here [1]. Edit: slightly less rough, but still quite rough: def GDPR_applies(company, person): if in_EU(compa…

I think this is a bit of an oversimplification. How do Facebook's EU subsidiaries fit into this? Can Facebook US simply divest themselves of responsibility in this case?

[deleted]

Re: Facebook urged to make GDPR its “baseline standard” globally

#120

Post by [deleted] »

j32fun wrote: post #75
taylorswift_ wrote: post #70

Earlier quoted context omitted.

thanks, wow responding to a letter like your first link could significantly bog down resources for a young company... you can imagine if you launched and even received moderate user growth early on, but then started receiving such letters, your productivity could go down the tubes.

I think so too. It certainly makes one question what kinds of app I would want to build.

[deleted]
Post reply on HN