Live data from Hacker News

€1.2B GDPR fine for Meta

noyb.eu

61–68 of 68 posts

Re: €1.2B GDPR fine for Meta

#61
post #59

I always thought this would be a cool thing to do if I ran Evil Corp... A = B = XOR A Store A in USA Store B in EU The data is not stored in EU, and it's not stored in USA either. It's not stored elsewhere. But Evil Corp still has it!

Encrypted PII are still PII, so this scheme would count as "data stored in the EU and key stored in the USA".

Re: €1.2B GDPR fine for Meta

#62
post #58

Earlier quoted context omitted.

How is this actually supposed to work in practice, other than sharding EU and non-EU customers and having them unable to communicate across the shards?

Why unable to communicate? Is there any reason why the relevant non-EU customer data cannot be stored within the EU as well?

If someone in the US visits a profile page of someone in the EU, that necessitates a transfer of data outside of the EU.

Perhaps that's an extreme and pedantic example though.

Re: €1.2B GDPR fine for Meta

#64

Politically, stopping data transfers to the US is not viable, because it would impact the deal between the EU and the USA (US covers EU defence for access to the EU common market). For this reason, I don't think we'll ever see a Chinese-style expulsion of US tech companies from the EU. Therefore, we've seen over a decade of a dance between the judiciary banning data transfers to the US (Safe Harbor ruling, etc) and t…

What are you talking about? GDPR is pretty clear.

I mean, I would agree. The EU courts have ruled pretty much every cross-border data sharing agreement with the US as illegal (e.g. Safe Harbour ruling eight years ago). The EU Commission considered that data transfers to US were not compliant back in 2000, which led to the Safe Harbour in the first place.

Despite all of this, we haven't seen any creation of an EU internet, and even in this latest ruling, they've suspended the ruling until they hope the new system comes into place that will allow cross-border data transfers to the US.

The point being that politically, there is no desire in the EU to cut themselves off from the US internet as you see in China, Russia, etc.

Re: €1.2B GDPR fine for Meta

#65

Earlier quoted context omitted.

Last I checked the US government taxed US corporations based on profits. One would assume that if US corporations are making less profit due to fines, then they’re also paying less taxes to the U.S. government.

>One would assume that if US corporations are making less profit due to fines, then they’re also paying less taxes to the U.S. government. I'm not familiar with U.S tax law but in the UK fines are not tax deductable. Not sure whether it matters that the fine was imposed by a foreign country.

It doesn’t really matter if the fine is tax deductible. Less profits means less tax. The U.S. doesn’t tax based on revenue.

Re: €1.2B GDPR fine for Meta

#66
post #37

Earlier quoted context omitted.

The decision goes further than a fine, though. It orders Meta to stop transferring personal data of people in the EU to the US.

How is this actually supposed to work in practice, other than sharding EU and non-EU customers and having them unable to communicate across the shards?

Confidential Cloud computing is the answer and hyperscalers work on that. You literally put your data in a black box.

Re: €1.2B GDPR fine for Meta

#67

Earlier quoted context omitted.

>One would assume that if US corporations are making less profit due to fines, then they’re also paying less taxes to the U.S. government. I'm not familiar with U.S tax law but in the UK fines are not tax deductable. Not sure whether it matters that the fine was imposed by a foreign country.

It doesn’t really matter if the fine is tax deductible. Less profits means less tax. The U.S. doesn’t tax based on revenue.

If fines don't count as an ordinary and necessary business expense then taxable income will be higher and you pay more tax.

For something to be tax deductible means that it reduces taxable income. Essentially it works like this:

Revenue - tax deductable business expenses = taxable income.

Post reply on HN