Live data from Hacker News

Ask HN: Startup people, how do you feel about GDPR?

news.ycombinator.com

1–10 of 25 posts

Ask HN: Startup people, how do you feel about GDPR?

#1
I'm doing research for my master's thesis on what the impact of GDPR is on startups and how startup founders and employees feel about GDPR in general.

I would like to hear your opinions and discuss them in this thread, and would also very much appreciate if you could spare 5 minutes to respond to a survey: https://forms.office.com/e/E37CdBAC8s

Thank you!

Re: Ask HN: Startup people, how do you feel about GDPR?

#2
I had a couple of personal projects with a few hundred users. Both could have become startups, but I shut them both down because of GDPR. The definition of the law is complex. I wasn’t doing anything underhand, but I don’t have the legal expertise to ensure I am 100% compliant with all parts of the law, and I don’t have the resources to hire lawyers. I cannot afford the punitive fines, and I have to consider the financial safety of my family. GDPR presents an unacceptable risk to me.

Re: Ask HN: Startup people, how do you feel about GDPR?

#3
post #2

I had a couple of personal projects with a few hundred users. Both could have become startups, but I shut them both down because of GDPR. The definition of the law is complex. I wasn’t doing anything underhand, but I don’t have the legal expertise to ensure I am 100% compliant with all parts of the law, and I don’t have the resources to hire lawyers. I cannot afford the punitive fines, and I have to consider the fina…

Yours is exactly the kind of scenario I find very interesting and will evaluate in my research. While it's important to protect individual right to privacy, it's also very important for the EU to make entrepreneurship as approachable as possible to truly boost economic growth.

Thanks for sharing your thoughts!

Re: Ask HN: Startup people, how do you feel about GDPR?

#4
post #2

I had a couple of personal projects with a few hundred users. Both could have become startups, but I shut them both down because of GDPR. The definition of the law is complex. I wasn’t doing anything underhand, but I don’t have the legal expertise to ensure I am 100% compliant with all parts of the law, and I don’t have the resources to hire lawyers. I cannot afford the punitive fines, and I have to consider the fina…

[deleted]

Re: Ask HN: Startup people, how do you feel about GDPR?

#5
I wish there was some kind of compliance fast track.

Like a starter kit for startups that aren't really interested in doing anything with people's personal data, but where it's just an accidental complexity of doing business with people. Maybe a pre-written terms of service, a code of conduct and a checklist for features your product needs to have for people to correct or delete their data themselves, which you don't want to waste time doing manually anyway.

At a certain point most companies are going to want to do some more advanced analytics on the personal data, but by then they have probably already grown to a scale where it doesn't hurt as much to hire a legal counsel to write a new ToS for their specific use case.

It might make sense for VCs to chip in and hire a law firm to make such a starter kit, to be distributed under a Creative Commons or similar license. Just like creative commons itself is a legal starter kit for creators who don't need a bespoke solution to ease up on a little on their copyrights.

Re: Ask HN: Startup people, how do you feel about GDPR?

#7
post #2

I had a couple of personal projects with a few hundred users. Both could have become startups, but I shut them both down because of GDPR. The definition of the law is complex. I wasn’t doing anything underhand, but I don’t have the legal expertise to ensure I am 100% compliant with all parts of the law, and I don’t have the resources to hire lawyers. I cannot afford the punitive fines, and I have to consider the fina…

> The definition of the law is complex

I don’t understand that sentiment. The text is almost self-contained and easy to read relative to lots of other legal things such as tax laws that you have to know if you start a business.

The GDPR basically boils down to “guard your user’s data, keep only what you need, and tell them what you do with it”.

For the typical “we keep user email addresses so that we can send them bills and credit card info so that we can charge them” use case it’s not hard to comply with the GDPR.

And, nitpick: the GDPR is not a law.

Re: Ask HN: Startup people, how do you feel about GDPR?

#8

I wish there was some kind of compliance fast track. Like a starter kit for startups that aren't really interested in doing anything with people's personal data, but where it's just an accidental complexity of doing business with people. Maybe a pre-written terms of service, a code of conduct and a checklist for features your product needs to have for people to correct or delete their data themselves, which you don't…

That's a good point. Thanks for your comment!

Re: Ask HN: Startup people, how do you feel about GDPR?

#9
post #7
post #2

I had a couple of personal projects with a few hundred users. Both could have become startups, but I shut them both down because of GDPR. The definition of the law is complex. I wasn’t doing anything underhand, but I don’t have the legal expertise to ensure I am 100% compliant with all parts of the law, and I don’t have the resources to hire lawyers. I cannot afford the punitive fines, and I have to consider the fina…

> The definition of the law is complex I don’t understand that sentiment. The text is almost self-contained and easy to read relative to lots of other legal things such as tax laws that you have to know if you start a business. The GDPR basically boils down to “guard your user’s data, keep only what you need, and tell them what you do with it”. For the typical “we keep user email addresses so that we can send them bi…

What do you mean by "the GDPR is not a law"? That statement is simply not correct.

Re: Ask HN: Startup people, how do you feel about GDPR?

#10
post #7

Earlier quoted context omitted.

> The definition of the law is complex I don’t understand that sentiment. The text is almost self-contained and easy to read relative to lots of other legal things such as tax laws that you have to know if you start a business. The GDPR basically boils down to “guard your user’s data, keep only what you need, and tell them what you do with it”. For the typical “we keep user email addresses so that we can send them bi…

What do you mean by "the GDPR is not a law"? That statement is simply not correct.

He means that due to the inanity of the eu the gdpr is a directive to the actual countries to pass a law (or laws) that match or exceed it.
Post reply on HN