Earlier quoted context omitted.
How does FOSS make gdpr compliance easier?
You can host it yourself on servers in the EU.
But Office supports this too. This isn’t an FOSS advantage. It’s a disadvantage of cloud hosted providers.
German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
291–300 of 346 posts
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#292Tech will end up exactly the same way finance is (if it isn’t already there). Employees will work for the regulatory enforcement agency for around five years on shit pay learning how the system works from the inside and making contacts in the industry before leaving and being ushered into a tech firm with a nice six figure salary. Meanwhile, no regulations will really get enforced apart from the odd token case agains…
I've never seen such a cynical comment like this one here. On what basis are you theorizing this?
So I first heard about it as a young man in the early 2010s when I encountered a woman who worked in the financial regulation sector in the UK who told me exactly what I just summed up in the first paragraph. Google “revolving door $INDUSTRY” and you’ll get a pretty good feel for how widespread it is. Naturally it’s downplayed by the official narrative such as in the last of the following three links:
https://en.m.wikipedia.org/wiki/Revolving_door_(politics)
https://en.m.wikipedia.org/wiki/Goldman_Sachs#Personnel_%22r...
https://cspl.blog.gov.uk/2017/02/08/regulators-and-the-revol...
If you’re based in the UK, buy an issue or two of Private Eye who will often name such people as well as the staggering amount of general corruption at play in UK politics.
As for the last paragraph, I recently heard some system thinkers express similar sentiments based on how FDR managed to enact real change and how most presidents have failed to achieve much in comparison since.
> During his first term, FDR quickly found that the federal bureaucracy, specifically at the Treasury and State Departments, moved too slowly for his tastes. FDR often chose to bypass these established channels, creating emergency agencies in their stead.
https://millercenter.org/president/fdroosevelt/domestic-affa...
In time however, these new agencies become bloated bureaucratic nightmares themselves. In my opinion, the circle of life extends to organisations as well life forms. I view economic booms and busts as a “changing of the seasons”: old organisations that can no longer compete die and new ones take their place. The problems start occurring when government intervenes to keep zombie companies around because they’re “too big to fail”.
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#293see : https://news.ycombinator.com/item?id=33741300 related : https://news.ycombinator.com/item?id=33686599
Thanks! Macroexpanded:
German state of Hesse has banned the use of Microsoft 365 in its schools - https://news.ycombinator.com/item?id=33741537 - Nov 2022 (115 comments)
Germany Forces a Microsoft 365 Ban Due to Privacy Concerns - https://news.ycombinator.com/item?id=33741300 - Nov 2022 (11 comments)
France bans Office 365 and Google Docs from schools and public administration - https://news.ycombinator.com/item?id=33686599 - Nov 2022 (183 comments)
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#294Earlier quoted context omitted.
I want to have the podunk builder build my house however I want. What is with all those pesky building codes! Because they (the government) think it is the minimum required for a dignified, safe society. And they are placed in a position of power and must make those judgment calls, because that is their job. Why would people want that? Because they understand, in general, that government is important and don't want a…
> Because they (the government) think it is the minimum required for a dignified, safe society. And they are placed in a position of power and must make those judgment calls, because that is their job. Ha, this is a naïve view of it. In the US, this is only kinda-sorta true. Building permits can often be a lucrative source of income for the city and sleazy inspectors who often come out without the faintest idea of wh…
I know several people who help write building codes in the US in various fields, and none of them are incompetent or write code other than to deal with known concerns based on past building performance and materials testing, etc. That there might be a problem with enforcement is more a byproduct of municipal professionalism in general than a problem with building codes. I have never seen hundreds of dollars in my (high cost of living) area for a fireplace inspection, but I guess it might exist as an outlier somewhere. Permits cost more, but that is because we have very low property taxes in California, and they recoup through the permits because they need funding from somewhere.
But the building code reference was just to provide an introductory analogy. The sentence you quoted was part of my direct answer to OP's question, which was why the GDPR, and why would people want it.
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#295Earlier quoted context omitted.
> Problem as always is, its all talk and (almost) zero enforcement in Germany. I have the exact opposite impression. Even in small start-up, every new external supplier will be judged whether the is any customer data processing in the US. People are super afraid of Google analytics. If you use the Google Fonts on your website you will get an cease and desist letter in no time from scummy lawyers. You pratically need…
> You pratically need an external company to manage your cookie banner because it is a legal risk. Don't set cookies for visitors. Notify on signup for everyone else.
Not really feasible in a lot of cases without giving up things the business absolutely wants. I work on an e-commerce site for a large company. Marketing wants to track all clicks and user inputs and get heat maps to improve the conversion based on their findings. They want to know where their users come from, where they go to see if their campaigns work. They also want google maps integration to find retail stores. They want users who come back 2 days later to retain their shopping cart and their preferences even without a login in case they checkout without an account. They want dynamic A/B testing based on user behaviour and they don’t want to/can’t reinvent all these solutions so they go buy them and the devs get to integrate them - whether they like it or not and some things simply make it so that you need to store some data on the client and communicate it on the client in some way while not being completely anonymous.
So cookie banner it is and to be sure you don’t get sued you buy that elsewhere.
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#296Earlier quoted context omitted.
> You pratically need an external company to manage your cookie banner because it is a legal risk. Don't set cookies for visitors. Notify on signup for everyone else.
Not really feasible in a lot of cases without giving up things the business absolutely wants. I work on an e-commerce site for a large company. Marketing wants to track all clicks and user inputs and get heat maps to improve the conversion based on their findings. They want to know where their users come from, where they go to see if their campaigns work. They also want google maps integration to find retail stores.…
> Marketing wants to track all clicks and user inputs and get heat maps to improve the conversion based on their findings. They want to know where their users come from, where they go to see if their campaigns work. They also want google maps integration to find retail stores. They want users who come back 2 days later to retain their shopping cart and their preferences even without a login in case they checkout without an account. They want dynamic A/B testing based on user behaviour and they don’t want to/can’t reinvent all these solutions so they go buy them and the devs get to integrate them - whether they like it or not and some things simply make it so that you need to store some data on the client and communicate it on the client in some way while not being completely anonymous.
Speaking a as user, I don't want your company to know or do any of those things. I'm very glad these practices are getting outlawed and I'd like your marketing team to know they can get hit by a bus for all I care, the world would be a better place without their cancerous doings. Psychological warfare against the general public is despicable.
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#297Earlier quoted context omitted.
I've never seen such a cynical comment like this one here. On what basis are you theorizing this?
So I first heard about it as a young man in the early 2010s when I encountered a woman who worked in the financial regulation sector in the UK who told me exactly what I just summed up in the first paragraph. Google “revolving door $INDUSTRY” and you’ll get a pretty good feel for how widespread it is. Naturally it’s downplayed by the official narrative such as in the last of the following three links: https://en.m.wi…
What leads you to think this will happen with privacy laws in the EU? Out of all jurisdictions they seem to be one of the ones you shouldn't fuck around with. They take time to pick up speed, but once they do, lord help you.
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#298Okay. And now?
Well, presumably German schools and the like will make a switch to OpenOffice, LibreOffice, Collabora, Koffice, or something like that.
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#299Earlier quoted context omitted.
> I understand the hope is that companies will comply rather than forego the entire European market, but if they don't, the last consequence is ultimately on the consumer, not the company. Essentially you are asking „why should a government expect anyone to follow the law“
It's more "why should a government expect any foreign company to follow the law". Personally I run a small business, GDPR came out, our solution is to just violate it and not care. They have no legal jurisdiction over us so their laws do not matter. If we had to comply with every jurisdictions special laws on the entire planet we'd surely waste most of our time doing it.
Microsoft has equipment and employees in Europe and specifically, in Germany. Plenty of room to expect them to follow the law.
Re: German privacy watchdogs conclude that Microsoft 365 is incompatible with GDPR
#300Earlier quoted context omitted.
Not really feasible in a lot of cases without giving up things the business absolutely wants. I work on an e-commerce site for a large company. Marketing wants to track all clicks and user inputs and get heat maps to improve the conversion based on their findings. They want to know where their users come from, where they go to see if their campaigns work. They also want google maps integration to find retail stores.…
> Marketing wants to track all clicks and user inputs and get heat maps to improve the conversion based on their findings. They want to know where their users come from, where they go to see if their campaigns work. They also want google maps integration to find retail stores. They want users who come back 2 days later to retain their shopping cart and their preferences even without a login in case they checkout with…
I’m with you. In fact I have had more meetings with these people arguing against these practices than I can count. However every single customer facing project I have worked on so far that tries to sell something uses practices like these. Sometimes even worse. I guess it’s a result of being profit oriented before anything else and it works apparently, otherwise it would not be done. So the change you advocate for is one I would like to see too but it challenges structures which are so pervasive I’m not sure they can be easily reversed. If this company got fined for using Google analytics their answer would not be to re-evaluate tracking, they would make their legal department lay out just how far they can stretch it while still getting away with it and the do that.