Live data from Hacker News

Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

autoriteitpersoonsgegevens.nl

271–280 of 414 posts

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#271

Earlier quoted context omitted.

Government spying on citizens is one thing. Companies is another. GDPR applies mostly to the latter, and in practice, today , most people in Europe aren't being harmed by their governments spying on them, but they are being harmed by private business abusing personal data.

I would much rather companies “spy” on me than the government.

That's a pretty outdated preference in the current age in the West.

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#272

Earlier quoted context omitted.

Alternative question: has breaking European laws become a major American industry?

If it is then Europe doesn't seem too upset about it. How could they be when it pays them so well?

How would you suggest they express their disapproval, if not through the legal system? I'm personally not opposed to holding conpany executives personally accountable, including jail time in severe cases, but I don't think this would go over well with the US government.

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#273

Earlier quoted context omitted.

Government spying on citizens is one thing. Companies is another. GDPR applies mostly to the latter, and in practice, today , most people in Europe aren't being harmed by their governments spying on them, but they are being harmed by private business abusing personal data.

I would much rather companies “spy” on me than the government.

but the us can, and perhaps did in the past, and perhaps will in the future, be able to access all that data nonetheless. it's not a dicotomy

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#274

Earlier quoted context omitted.

Silly question, the EU simply has stricter privacy and data protection laws. As these came into effect relatively recently, a lot of these companies are trying to see what they can get away with. Or at the very least taking a calculated risk that the regulation authorities are not going after them. So the only way to actually get them to respect these laws is by attaching actual tangible consequences to breaking them…

I know EU has stronger data privacy laws. I just wonder if they're really all that upset about American companies breaking them. They get to use the new tech and fine the companies that bring that tech to them. It's a win-win.

Yes we are upset about American companies breaking the law and using unfair market advantage to get ahead. It's certainly not a win-win. The fines are a drop in the bucket.

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#275

Earlier quoted context omitted.

Silly question, the EU simply has stricter privacy and data protection laws. As these came into effect relatively recently, a lot of these companies are trying to see what they can get away with. Or at the very least taking a calculated risk that the regulation authorities are not going after them. So the only way to actually get them to respect these laws is by attaching actual tangible consequences to breaking them…

I know EU has stronger data privacy laws. I just wonder if they're really all that upset about American companies breaking them. They get to use the new tech and fine the companies that bring that tech to them. It's a win-win.

That certainly is.... a take. Still a silly one if you ask me. If that were true they wouldn't fine EU companies either. Yet, that is also happening.

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#276
post #146

Funny thing is, us data is almost always maintained by people outside of the US, at least for banking. The servers may live in the us, but the people accessing it are probably located in Europe or India. This also means that the data lives their temporarily while it is being accessed. The US definitely needs stronger laws here.

NAL, but I think GDPR has exceptions for remote access, i.e. if a worker in India is viewing data held in the US, that is not necessarily formally considered a transfer from the US to India, even though the data clearly has made it to India if it's being displayed on a screen there.

Under GDPR I believe if the data access is from an employee of the company (eg Uber) then there aren’t location checks. (Been a while so I could be mistaken here.)

But if you are subcontracting to an agency you need to list them as Subprocessors in your DPA. So subcontracted support staffing companies for example would be required to be listed and explicitly consented to.

This is all assuming you set up the base contractual protections for the data required to export the data at all, which Iber apparently didn’t do here.

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#277
post #221
post #205

Earlier quoted context omitted.

> a very steep fine > > The appeals process is expected to take some four years and any fines are suspended until all legal recourses have been exhausted, according to the DPA. fine is suspended. it will take 4 years of appeals :)

Once again demonstrating that fining a corporation for criminal behavior is simply adding to their operating cost, and the lawyers will always get paid

> Once again demonstrating that fining a corporation for criminal behavior is simply adding to their operating cost

what is the major insight that you are trying to share?

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#279
post #226

This puts the total fines from the EU on American tech businesses at $14.8B in the last few years: https://loeber.substack.com/p/20-no-more-eu-fines-for-big-te... I think this substack is good, it makes a pretty clear case that US tech companies may not leave Europe any time soon, but they wield the power in the relationship much more so than the Europeans. Those regulators are overplaying their hands.

Although I support European privacy laws, I also detest their push for censorship of social media, the arrest of Telegram CEO Pavel Durov, and this feeling that they’re milking US companies for tax revenue. I do think this can end up being overplaying their hand - why should US taxpayers fund NATO and the EU’s defense disproportionately, for example, if the EU is also going to steal from US companies and not holding up classically liberal values like free speech? Is it really in American interest to tolerate this status quo?

Re: Dutch DPA fines Uber €290M because of transfers of drivers’ data to the US

#280
post #199

Earlier quoted context omitted.

this take is naive. building alternatives takes time and resources. the EU has neither. a diverse, competitive tech ecosystem with both EU and non-EU players is better than a protectionist approach. hoping for an exodus of major global players when you’re leapfrogged by both China and the US…

>building alternatives takes time and resources. the EU has neither. This is kind of a FUD fueled false dichotomy, when the truth is we can't know if the EU doesn't have time or resources if it never tries. What the US has that EU doesn't is the infinte money to throw in the bonfire at moonshot projects knowing that 99% will fail and the 1% will be hugely successful, but now the market is mature with less untapped op…

> but now the market is mature with less untapped opportunities

at a macro level i don’t think things stand still waiting for the europeans to catch up. i think things are moving extremely fast and you either adapt or “stagnate”.

Post reply on HN