5 ms·

There is no lack of regulation in the USA, it's just the USA has some wrong regulations that creates horrible results you see sometimes. Most of it is from a l

There is no lack of regulation in the USA, it's just the USA has some wrong regulations that creates horrible results you see sometimes. Most of it is from a lack of single payer healthcare and a public culture of infrastructure neglect with high amounts of waste compared to pretty much everywhere else in the world. I really think it comes down to legislation philosophy. In the english speaking countries, cost of compliance is something that is thought about for small businesses, so many regulations are small business exempt until you get to certain employee counts or revenue numbers. In the EU, that concept doesn't seem to exist and businesses of 1 are assumed to be $100M revenue businesses that can afford to do things like GDPR properly.

literallycancer 9y ago
If you are a 1 man show, how about not collecting data you most likely don't need anyway? And the 4% global revenue fine the GDPR is famous for does exactly what you want -- scales with the means of the business.
- eitland 9y ago
  Last I saw there was a minimum fine of x million Euros. Edit: had to verify. It seems a bit more reasonable: """Article 83 of the General Data Protection Regulation provides details of the administrative fines. There are two tiers of fines. The first is up to €10 million or 2% of annual global turnover of the previous year, whichever is higher. The second is up to €20 million or 4% of annual turnover of the previous year, whichever is higher.""" - https://www.gdpr.associates/what-is-gdpr/understanding-gdpr-fines/ https://www.gdpr.associates/what-is-gdpr/understanding-gdpr-...
  - woolvalley 9y ago
    Yes, because a minimum fine of $10 million for a 1 person business is totally reasonable, unless by the grace of the bureaucracy, they decide to give you a warning instead. /s Also the GP post, there is more than 'avoiding collecting data'. If you have text field comments form and a 3rd party puts 'personal data' in that, then that is GDPR liable! You also need audit logs and and list of other requirements that needs multi engineer teams to implement properly. As a result, most small businesses with email are probably not going to be properly compliant on some level and you can prosecute anyone. Just like the new-ish VAT laws, large stores are going to be compliant because they can afford it, while some petty bureaucrat will prosecute the small online shops instead.
    - true_religion 9y ago
      The ten million is a maximum, not a minimum.
      - nothrabannosir 9y ago
        “Whichever is higher” is a max(), not a min(), i.e. it’s a “minimum” (counter-intuitively)
        true_religion 9y ago
        I thought since they said a fine "up to X" it would mean that X was the upper boundary. So you could certainly be fined a lot less than $10 million.
        eitland 9y ago
        Seems like something like =max(whatTheJudgeThinks, max(10mEUR, 0.02*turnover))

literallycancer 9y ago

If you are a 1 man show, how about not collecting data you most likely don't need anyway? And the 4% global revenue fine the GDPR is famous for does exactly what you want -- scales with the means of the business.

eitland 9y ago
Last I saw there was a minimum fine of x million Euros. Edit: had to verify. It seems a bit more reasonable: """Article 83 of the General Data Protection Regulation provides details of the administrative fines. There are two tiers of fines. The first is up to €10 million or 2% of annual global turnover of the previous year, whichever is higher. The second is up to €20 million or 4% of annual turnover of the previous year, whichever is higher.""" - https://www.gdpr.associates/what-is-gdpr/understanding-gdpr-fines/ https://www.gdpr.associates/what-is-gdpr/understanding-gdpr-...
- woolvalley 9y ago
  Yes, because a minimum fine of $10 million for a 1 person business is totally reasonable, unless by the grace of the bureaucracy, they decide to give you a warning instead. /s Also the GP post, there is more than 'avoiding collecting data'. If you have text field comments form and a 3rd party puts 'personal data' in that, then that is GDPR liable! You also need audit logs and and list of other requirements that needs multi engineer teams to implement properly. As a result, most small businesses with email are probably not going to be properly compliant on some level and you can prosecute anyone. Just like the new-ish VAT laws, large stores are going to be compliant because they can afford it, while some petty bureaucrat will prosecute the small online shops instead.
  - true_religion 9y ago
    The ten million is a maximum, not a minimum.
    - nothrabannosir 9y ago
      “Whichever is higher” is a max(), not a min(), i.e. it’s a “minimum” (counter-intuitively)
      - true_religion 9y ago
        I thought since they said a fine "up to X" it would mean that X was the upper boundary. So you could certainly be fined a lot less than $10 million.
        eitland 9y ago
        Seems like something like =max(whatTheJudgeThinks, max(10mEUR, 0.02*turnover))