Live data from Hacker News

Europe is scaling back GDPR and relaxing AI laws

theverge.com

801–810 of 1001 posts

Re: Europe is scaling back GDPR and relaxing AI laws

#801
post #564
post #270

I get that too many regulations is a bad thing. But when we talk privacy and personal data there should be no gray zone. It has to be black and white. When I see a stupid cookie banner I search for "Reject all". There's no some data that companies can collect and process without my consent, they just shouldn't be able to collect anything without me actively opting in. Business never respects anything, but profits. Se…

Are cookies really tracking you? 3rd party cookies don’t work in any browser. Ads are passing session data on the URLs instead. You can alow easily change some settings to stop persistent cookies. You can install privacy extensions like ghostery to block beacons. You can use features like ICloud private relay to prevent IP tracking. Solutions are all there and they aren’t because of any law.

> Ads are passing session data on the URLs instead

At which point it also counts as PII and is subject to the GDPR rules.

Re: Europe is scaling back GDPR and relaxing AI laws

#802
post #709

Earlier quoted context omitted.

Starting a company in Sweden requires (uploaded PDF from Bolagsverket to ChatGPT who summarized): 1. Prepare the foundation deed and the articles of association. 2. Identify the beneficial owner(s). 3. Pay the share capital and obtain the bank certificate or auditor’s statement. 4. Submit the registration application for the limited company to the Swedish Companies Registration Office (Bolagsverket) and wait for appr…

> This is not what I'd call a straightforward process, personally. It's a (check)list....what could be more straightforward?

I guess it depends what we mean with straightforward. If we mean something along the lines of "no ambiguity" then yes. If we mean something along the lines of "simple, easy to do" then no. Almost anything can be accomplished with a sufficiently long checklist. I just feel like the entire process could be streamlined and simplified.

Re: Europe is scaling back GDPR and relaxing AI laws

#803
post #788
post #709

Earlier quoted context omitted.

Starting a company in Sweden requires (uploaded PDF from Bolagsverket to ChatGPT who summarized): 1. Prepare the foundation deed and the articles of association. 2. Identify the beneficial owner(s). 3. Pay the share capital and obtain the bank certificate or auditor’s statement. 4. Submit the registration application for the limited company to the Swedish Companies Registration Office (Bolagsverket) and wait for appr…

Are you implying that there is a country somewhere you don't have to "keep bookkeeping and prepare annual accounts"? Sounds like bog standard things.

No, that's not what I'm implying. I'm saying that it's needlessly complicated.

Re: Europe is scaling back GDPR and relaxing AI laws

#804

Earlier quoted context omitted.

I disagree with this otherwise seemingly reasonable position. Draghi's latest report pointed out that overregulation is a major problem in the EU and costs EU companies the equivalent of a 50% tariff (if I remember correctly). Of course, Draghi's report has led to nothing more than a few headlines.

That 50% figure seems extremely dubious. I'd expect either methodological failures, or a definition of "costs" that I disagree with (e.g. fair-competition regulations preventing price-hikes, "costing" EU companies the profit they could obtain from a cartel). However, skimming the report ( https://commission.europa.eu/topics/competitiveness/draghi-r... ), I can't find the 50% figure.

Seems pretty real. E.g. CRA official impact assessment estimates one-time (in addition to ongoing costs) compliance cost at €500K per one product. That is enough for 10 man years per product.

And that is just one of many new regulations.

Re: Europe is scaling back GDPR and relaxing AI laws

#805

Earlier quoted context omitted.

That cookie banner needs to be standardized and offered by the browser. It should be like a certificate popup. Why is every website forced into doing a shoddy job ?

They aren't forced, they choose to. They're forced to get user permission before tracking them across websites and sharing info with 3rd parties, but how they do it is left up to the industry. And the industry chose dark patterns, hoping to annoy the users into complaining to the EU about them.

It is the fault of the EU. If you leave a steak on the floor you don't punish the dog for eating it. Site operators just chose to do what was most convenient for them within the boundaries of the law, as would you.

Re: Europe is scaling back GDPR and relaxing AI laws

#806
post #270

I get that too many regulations is a bad thing. But when we talk privacy and personal data there should be no gray zone. It has to be black and white. When I see a stupid cookie banner I search for "Reject all". There's no some data that companies can collect and process without my consent, they just shouldn't be able to collect anything without me actively opting in. Business never respects anything, but profits. Se…

[deleted]

Re: Europe is scaling back GDPR and relaxing AI laws

#807
post #270

I get that too many regulations is a bad thing. But when we talk privacy and personal data there should be no gray zone. It has to be black and white. When I see a stupid cookie banner I search for "Reject all". There's no some data that companies can collect and process without my consent, they just shouldn't be able to collect anything without me actively opting in. Business never respects anything, but profits. Se…

This is why I just bought a Pixel and put GrapheneOS on it. And one with a SIM card that I can take out whenever I want. No AI, limited tracking, and no big tech. This is my personal boycott.

Re: Europe is scaling back GDPR and relaxing AI laws

#808

Earlier quoted context omitted.

I totally agree with this view! I understand why the rules are vague to an extent, simply because it is hard to impossible to cover every aspect of data collection. But the GDPR is super vague on some very technical datapoints as well. Is an IP Address PII? Is there a difference between an IPv4 or an IPv6 address being PII? What constitutes as legitimate interest specifically? Can I use data for legitimate interests…

IP addresses are PII. This has long been determined.

[deleted]

Re: Europe is scaling back GDPR and relaxing AI laws

#809

Earlier quoted context omitted.

> This is like arguing if "heater on" or "AC on" is better, which is a pointless argument. That entirely depends on what the temperature is! I think the problem here is more that _some_ people want the heater to be on and _other_ people want the heater to be off.

And when it comes to privacy, consumer advocate types and privacy wonks (I include myself in this group) want the heater to be on, and technology companies and advertising companies and all of their hangers-on want the heater to be off. One group has a lot more money, power, and influence than the other.

[dead]

Re: Europe is scaling back GDPR and relaxing AI laws

#810
post #270

I get that too many regulations is a bad thing. But when we talk privacy and personal data there should be no gray zone. It has to be black and white. When I see a stupid cookie banner I search for "Reject all". There's no some data that companies can collect and process without my consent, they just shouldn't be able to collect anything without me actively opting in. Business never respects anything, but profits. Se…

> But when we talk privacy and personal data there should be no gray zone.

It took me to move to Germany to figure that privacy is a spectrum, and I, despite being a crazy on privacy and security, actually don't want that much.

I've been to a German factory where robots could not distinct between humans and objects bc Datenschutz.

My colleagues had 3 bikes stolen in a week bc we have no CCTV cameras.

Privacy definitely has costs, and not only for business, but for regular people in daily life. It should, as anything, be balanced against costs of doing business, people security concerns.

Same goes for security: few private cctvs are ok, massive coordinated surveillance and chat control not ok. Everything is on spectrum and is a trade off.

Post reply on HN