3 ms·
So having been through the preliminaries of GDPR, I took away a few things. First of all, the enforcement path is as yet unclear. If they (europe) see you are
by wglb 9y ago
So having been through the preliminaries of GDPR, I took away a few things.
First of all, the enforcement path is as yet unclear. If they (europe) see you are doing something (like not responding to "right to be forgotten" request) it is not clear what enforcement they will attempt.
Second, there is the customer perception. If you have one European customer that buys something from you, or enters their email for you to give them some product information, and they request later to be forgotten and you don't, there is then a chance of public perception that you don't comply.
But there can be other avenues of exposure. For example, if you are dealing with a US bank that does comply with GDPR and you don't, there may be some pushback from the bank. So while EU may not come for you directly, there could be a secondary effect.
From a little conversation with European partners, I got the sense that US was taking GDPR more seriously than some EU companies.
- damontal 9y ago>and they request later to be forgotten and you don't How do you prove you have forgotten someone?
- madez 9y agoYou attest so legally binding. The legal system does not function on mathematical proofs. If it turns out you did not speak the truth, you can be fined, and maybe even jailed. That's how it works. Also, we are not talking about forgetting someone personally, but deleting their data. I assume that's clear.
- freeone3000 9y agoSo if you're willing to indefinitely lie, you just get out? This seems inefficient.
- chopin 9y agoYou better have not a breach in this case...
- rrix2 9y agoConsidering this is not about human memory but about computers and data storage, and those things are traditionally pretty bad at lying, it seems like a bad path to take, personally.
- wglb 9y agoDepending on your industry, or your global customer requirements, you might have to have an audit that shows that you have such procedures in place. If you are small, don't get breached, and attest that you have done the deletion.