2 ms·

The facebooks and googles can afford to follow GDPR. If you know some people that work there, you'll realize there have been multi-year efforts to become GDPR c

The facebooks and googles can afford to follow GDPR. If you know some people that work there, you'll realize there have been multi-year efforts to become GDPR compliant in those companies. It's the small companies who literally can't afford the staff to properly implement the GDPR. It looks like it's turning into a regulatory barrier that protects the big guys and scares the small guys away. There is nothing in the GDPR that says: "if your a small < 5 person corp not in europe that isn't a subsidary of another corporation, then the GDPR does not apply (ie: Joe's blog, Sue's landscaping)". Or "If your revenues & employee counts are within this band, then the maximum fine can only be applied on a percentage basis and not millions.". IF these regulators really didn't want to scare away the small guys, they would of put that into the law. "Don't worry, the european courts are nice people" is not a strong enough guarantee for most people and corporations.

geocar 9y ago
“Following the GDPR” is easy for most companies because the amount of personal data they keep and have at risk is extremely low. The ICO has some great guidance for them: https://ico.org.uk/for-organisations/business/ https://ico.org.uk/for-organisations/business/ > “Don't worry, the european courts are nice people" is not a strong enough guarantee for most people and corporations. The GDPR is already law and people, and corporations are still here. That’s how courts work in Europe. They can fine you for hurting consumers or putting them at risk even if the specific actions you’re taking aren’t necessarily coded and specified. As an American living here I understand how strange that can seem, but the advantage is that companies getting prepared for the GDPR are treating the personal data they keep as a liability instead of treating it as an asset.

geocar 9y ago

“Following the GDPR” is easy for most companies because the amount of personal data they keep and have at risk is extremely low. The ICO has some great guidance for them: https://ico.org.uk/for-organisations/business/ https://ico.org.uk/for-organisations/business/ > “Don't worry, the european courts are nice people" is not a strong enough guarantee for most people and corporations. The GDPR is already law and people, and corporations are still here. That’s how courts work in Europe. They can fine you for hurting consumers or putting them at risk even if the specific actions you’re taking aren’t necessarily coded and specified. As an American living here I understand how strange that can seem, but the advantage is that companies getting prepared for the GDPR are treating the personal data they keep as a liability instead of treating it as an asset.