5 ms·
> I don't see this helping US SaaS companies, because once GDPR is in-place then I'd consider EU SaaS providers to be more attractive. It's a real selling point
by moduspol 9y ago
> I don't see this helping US SaaS companies, because once GDPR is in-place then I'd consider EU SaaS providers to be more attractive. It's a real selling point that your data isn't leaking or being mismanaged.
Does GDPR prevent data from being leaked or mismanaged?
- heavenlyblue 9y agoBut it gives a clear way of penalising the company if they are caught doing so (and a clear definition of what "doing so" means).
- louthy 9y agoNo - but it penalises you if you fail to follow best practice (like not encrypting data at rest for example). So, the incentive to do the right thing is greater seeing as you can be fined a percentage of your turnover.
- moduspol 9y agoIndeed. Just pointing out the clear difference between that and what was stated.
- louthy 9y agoThanks for clearing that up. I’m sure nobody knew what I meant until I made the clarifying post above. As an individual I am much more likely to trust an organisation that follows GDPR regulations over one that doesn’t. That obviously doesn’t mean they’re never going to have a data breach- but by law they will have to announce it within 3 days, and will face massive fines if negligent - that, to me, is a company I would prefer to give my business to - and was my point. Pedantry doesn’t help.
- moduspol 9y agoGDPR is very popular here on HN, but I think it's important to keep a level head about what it actually does and what its real-world effects will be. That is the entire point of this thread, after all. The difference between "not having a breach" and "a legal obligation to announce it within three days" is not semantic. It is absolutely material to the real-world value of GDPR, and claims about it should reflect that.