Why use an abbreviation in the title when it wasn't used in the latimes.com headline? 'CA' on its own is ambiguous.
Because titles here are limited in length to 80 characters.
CCPA goes into effect January 1, but nobody’s sure how the new rules work
31–40 of 129 posts
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#32Earlier quoted context omitted.
It's good that one state can force it's hand over the other 49?
This single state contains Silicon Valley and is 14% of the US economy. Jurisdictionally, it could be challenged - but again, a business could just decline to do business with all customers in CA. btw - nothing new here (fta): "Big companies are signing deals with firms that specialize in compliance". Big companies already hire compliance companies for a large number of other regulatory requirements. This is just yet…
> This single state contains Silicon Valley and is 14% of the US economy
california is the sixth largest economy in the world.
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#33Earlier quoted context omitted.
I do not understand why they do that. If a US news outlet has no presence in the EU there is nothing which can be done if they do not follow EU rules.
It’s just a passive-aggressive hissy fit. The cost of writing the middleware to write out your angsty nonsense is higher than the cost of writing the middleware to just remove all cookies from every request. The EU detection logic is the same in both cases.
GDPR has a lot of burdensome requirements, like hiring a commissar and multi-month government review periods before features launches. Do not bet 21M USD that merely deleting cookies and logs will get you anywhere near compliance.
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#34Earlier quoted context omitted.
Personally I think it is appropriate. California has long been known to do such things, for instance having different requirements for cars regarding emissions. In general I think California is using their huge size and role (obviously, as home to most of the dominant internet companies like Google and Apple and Facebook) to push the rest of the country forward.
Or backward. Depending on one's view of any particular policy that California does that the other states choose not to.
Typically it is forward. That doesn't mean "better", but it does mean that it is moving things in directions that the rest of the country eventually follows.
Can you give an example of something California did that was a move backwards? As in, moving back to a way that we did things in the past but the rest of the country has moved on from?
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#35This article makes it sound like this entire industry wasn’t deliberately set up and developed by corporations for years. They know exactly what they’re doing and they know exactly how to turn the whole thing off.
> they know exactly how to turn the whole thing off.
The problem is that no, they don't. Companies wrote infrastructure on premise that user would never ask/get/delete the info that is stored on him/her therefore now it's really difficult for companies to actually gather/delete data that is tied to a specific user in a safe matter.
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#36Earlier quoted context omitted.
Could this be handled with a single checkbox stating that you are either in CA or a CA resident/etc?
I suppose so, but it's a similar situation as GDPR/cookie consent when you need to perform 0-interaction data collection like running Ads for incognito users or creating a session that might also be used to track you on other websites. Maybe these use cases will just fall out of play as compliance when using them gets harder (which would not be a bad thing).
If we weren't collecting personally identifying information with paper ads, no reason to just allow it just because technology lets you.
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#37Earlier quoted context omitted.
This single state contains Silicon Valley and is 14% of the US economy. Jurisdictionally, it could be challenged - but again, a business could just decline to do business with all customers in CA. btw - nothing new here (fta): "Big companies are signing deals with firms that specialize in compliance". Big companies already hire compliance companies for a large number of other regulatory requirements. This is just yet…
> This single state contains Silicon Valley and is 14% of the US economy california is the sixth largest economy in the world.
Those two statements aren't mutually exclusive
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#38I'm not confident that this is a good thing after the mess that resulted me in having to navigate dozens of cookie popups on most days.
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#39How are these different from GDPR? Most global companies should already have most of this in place, so it will just hurt the small businesses which has yet to expand outside the states. Is there some limit to company size here to avoid that?
Most companies do not comply with GDPR, and it's not about the minutia, it's about just very basic concepts regarding user data and privacy.
I'm a US expat and honestly its extremely frustrating to try to use sites I formerly was able to access (with µblock) due to either absolutely obtrusive and confusing opt-in/out policies (e.g., Oath) or complete rejections/refusal of anyone with an IP outside the US (this is exceptionally frustrating as I don't even live in the EU, but because the lazy solution of applying the GDPR block to any non-US address is often used, I cannot read many US new sites)
Global companies have __not__ adapted to GDPR, and instead have just dragged their feet. I'm curious if the EU is going to do anything about it for sites that frequently do business in the EU, or if they will start enforcing actual GDPR policies on the big players (for example, Google is a beast to use in any EU member nation if you choose not to grant consent for data collection by just using element blocking)
The idea that companies have complied with GDPR does not mesh with my experience actually trying to use websites in the Schengen Area. And I don't blame GDPR, I blame companies for the insane amount of data and tracking they want for viewing even a minute amount of content.
Re: CCPA goes into effect January 1, but nobody’s sure how the new rules work
#40Why use an abbreviation in the title when it wasn't used in the latimes.com headline? 'CA' on its own is ambiguous.
I was sure it was Certificate Authority.