3 ms·
> The GDPR allows for reasonable usecases like this. It allows for simple logs. It does not allow for simple immutable logs, because your customers must alway
by eadmund 9y ago
> The GDPR allows for reasonable usecases like this.
It allows for simple logs. It does not allow for simple immutable logs, because your customers must always be able to force you to forget about them. There's nothing about sharing data between organisations: the GDPR requires — with certain very minor exceptions — that someone holding personally-identifying information delete it on request.
As an aside, this:
> This actually enables further innovations for instance you can log a cars behaviour without a user fearing you might sell this information on to their insurance company.
… isn't really true: the logger can still sell it, it just may not.
- rusk 9y agoThat’s wrong. Data protection legislation expressly forbids a “Data Controller” from sharing information relating to a “Data Subject” with any third party, consent notwithstanding. There is limited scope for a third party “Data Processor” to operate on the data but this is subject to strict conditions including maintaining the integrity of the data subjects privacy. GDPR elaborates on this and provides tougher enforcement mechanisms driven at commission level rather than purely enacted by individual governments. This elimination of wiggle room is what has people running scared.
- eadmund 9y ago> > the logger can still sell it, it just may not. > That’s wrong. Data protection legislation expressly forbids I'm sorry, I assume that English is not your first language. 'Can' means 'is able to'; 'may' means 'is allowed to.' The GDPR does not allow selling something, but it's still perfectly possible for someone to do so. People break the law all the time. I raised the issue of can vs. may because it's germane to the issue of immutability. It is possible to build a system in which it is mathematically impossible (within arbitrarily-determined limits) to alter data; it is not possible to design a system in which it is possible to prevent someone from telling someone else something he knows. It's odd to me that the GDPR bans the former, desirable system.
- rusk 9y agothanks for clearing that up. you were unclear that you were speaing in terms of utility rather than legality. legally you "can't" and "may not". To do so would be in breach of the law. GDPR has expectations that Data Controllers take reasonable steps to protect a data subject. Theres no expectation that you anticipate all mathematical possibilities...