Germany fines H&M 35 million euros for data protection breaches • Hacker News Board

Re: Germany fines H&M 35 million euros for data protection breaches

#51

Post by tgsovlerkhgsel » Fri, Oct 02, 2020, 11:11 PM UTC

jacquesm wrote: post #41

tgsovlerkhgsel wrote: post #38

I wonder if the huge, scaled violations (when web sites violate the privacy of millions of visitors through "consent" dialogs that require dozens of clicks or by claiming legitimate interest where it has already been decided that's not OK) will receive penalties scaled accordingly to their scale of the violation, and it's just taking time, or if the DPAs are just continuing their pattern of bringing the hammer down o…

DPA's don't go on fishing expeditions, if you want them to do something you have to inform them.

Oh, I have. They usually respond three months later (i.e. two months later than they're supposed to) with some noncommittal message.

It's not a problem of a lack of reporting.

Re: Germany fines H&M 35 million euros for data protection breaches

#52

Post by jacquesm » Sat, Oct 03, 2020, 9:28 AM UTC

tgsovlerkhgsel wrote: post #51

jacquesm wrote: post #41

Earlier quoted context omitted.

DPA's don't go on fishing expeditions, if you want them to do something you have to inform them.

Oh, I have. They usually respond three months later (i.e. two months later than they're supposed to) with some noncommittal message. It's not a problem of a lack of reporting.

That is interesting. Ok, then you should follow up with them and ask for how your case is progressing and do a write-up if you do not receive a satisfactory answer.

Re: Germany fines H&M 35 million euros for data protection breaches

#53

Post by tgsovlerkhgsel » Sat, Oct 03, 2020, 12:21 PM UTC

jacquesm wrote: post #52

tgsovlerkhgsel wrote: post #51

Earlier quoted context omitted.

Oh, I have. They usually respond three months later (i.e. two months later than they're supposed to) with some noncommittal message. It's not a problem of a lack of reporting.

That is interesting. Ok, then you should follow up with them and ask for how your case is progressing and do a write-up if you do not receive a satisfactory answer.

I honestly don't have the time and energy to chase a non-functioning entity that I have no effective way of forcing to do their job.

I do donate generously to noyb.eu, which is using those donations to hire full-time people to do exactly that, plus trigger lawsuits where necessary.

I did talk to people working DPAs though, and they seem obsessed with the irrelevant small stuff (particularly keeping people from easily communicating via e-mail is their pet peeve, ignoring the improvements in transport security that happened in the past two decades since they developed their policies), instead of dealing with what affects everyone.