3 ms·
> If you work for a small company and you don't have all these processes set up, you don't have legal counsel I really feel bad for you this isn't something tha
by zandor 9y ago
> If you work for a small company and you don't have all these processes set up, you don't have legal counsel I really feel bad for you this isn't something that you can just wing it.
But that is exactly the point. If a smaller company does not have the resources (both costs and competence) for something like this, then they should not be handling personal data at all. How would the same excuse sound if they don't have the resource to even secure personal data? Being too small is simply not a valid excuse.
- amygdyl 9y agoThis is to my mind analogous to the rarity of company directors being knowledgeable about the Companies Act, a 760+ page document with hundreds of summary criminal sanctions for non compliance. The modern frameworks for commerce are indeed complex and may take some time to master, but the affordances to individual company directors, principally but not at all limited to the benefit of limitation of liability, are a enormous economic benefit which society freely affords without any test of competence, the absence of which I have always felt is as harmful to the public at large as scrapping driving tests, greater if you could be so callous to render life and limb as purely economic costs.