4 ms·

I'm currently watching Mark Zuckerburg give testimony to the US House, which started at 10 AM EDT. It's available to watch on https://energycommerce.house.gov/h

I'm currently watching Mark Zuckerburg give testimony to the US House, which started at 10 AM EDT. It's available to watch on https://energycommerce.house.gov/hearings/facebook-transparency-use-consumer-data/ https://energycommerce.house.gov/hearings/facebook-transpare... , which has some additional supporting documentation (written testimony). It's also being streamed on Twitch by the Washington Post (https://www.twitch.tv/washingtonpost https://www.twitch.tv/washingtonpost). I also have a stream like yesterday alongside Facebook's stock information (https://news.ycombinator.com/item?id=16811290 https://news.ycombinator.com/item?id=16811290), which I posted on HN earlier. One thing that I noticed to be a sharp difference from yesterday is Mark Zuckerburg's stance on GDPR-like protections for people everywhere. I might be wrong about this account, but yesterday he said that GDPR protections will only be available in Europe. Today, he said the GDPR-like protections will be available for users everywhere. He said yesterday and today that Facebook was already implementing portions of the GDPR for years. I don't have a clip for the above yet, and I might have misheard. 12:42 PM: A Congressman (Mr. Lujan, New Mexico) just used the word "shadow profiles", and is asking about how much information Facebook has on non-users.

lainga 9y ago
I was wondering about this too: MZ's leaked cheatsheet said "... don't mention we are GDPR-compliant already". GDPR-compliant, not GDPR-like. He never brought that speaking point up. Does this mean FB can comply with GDPR everywhere but will choose not to?
- madeofpalk 9y ago
  It wasn't brought up in yesterday's hearings, but Facebook/MZ has actually avoided making any sort of commitment as to whether they will apply GDPR globally, or just within Europe.
  - roymurdock 9y ago
    GDPR compliance limits the data they can collect, which makes their product (ad space) less valuable, which reduces order volume/price, which reduces stock price, which means they will avoid if possible.
    - madeofpalk 9y ago
      Does it actually? My understanding of GDPR is that it's more about notifications and responding to requests rather than limiting companies from doing things.
- tareqak 9y ago
  In terms of software, it usually takes more effort to segregate/separate features (think like an having if-statement, "IF IP-address from EUROPE" versus not), so I definitely think it's both possible and technically easier to give GDPR protections to everyone. However, there might be data storage and reporting requirements that I am unaware of and are onerous to deliver. Cynically though, giving GDPR protections to all users will probably affect the quality of their ad-targeting process, and therefore, Facebook's bottom line.
  - ThrustVectoring 9y ago
    GDPR compliance seems pretty all-or-nothing. It wouldn't be sane to respond to a "hello, are you complying with GDPR for my data" letter with "You aren't a European citizen so we don't have to". If you're wrong, you get screwed over. The only sane options IMHO is either set things up to be GDPR compliant or to have zero business presence in Europe and tell them to pound sand.
mtgx 9y ago
No, he said it yesterday, too, and a week ago in a Facebook post/transcript. However, it's highly unlikely Zuckerberg is being misleading here and only certain parts they're picking and choosing will be enabled in the US. > We intend to make all the same controls and settings available everywhere, not just in Europe. Is it going to be exactly the same format? Probably not. We need to figure out what makes sense in different markets with the different laws and different places. But—let me repeat this—we’ll make all controls and settings the same everywhere, not just in Europe. https://newsroom.fb.com/news/2018/04/hard-questions-protecting-peoples-information/ https://newsroom.fb.com/news/2018/04/hard-questions-protecti... https://www.theverge.com/2018/4/11/17224492/zuckerberg-facebook-congress-gdpr-data-protection https://www.theverge.com/2018/4/11/17224492/zuckerberg-faceb...
- tareqak 9y ago
  unlikely or likely that Zuckerburg is misleading? Could you please clarify?
eridius 9y ago
HN linked your twitch link incorrectly, so here's the correct link: https://www.twitch.tv/washingtonpost https://www.twitch.tv/washingtonpost
- tareqak 9y ago
  That might have have just been me. Thanks! I'll fix it.
psyc 9y ago
I’m sure I did hear him emphasize it yesterday.

lainga 9y ago

I was wondering about this too: MZ's leaked cheatsheet said "... don't mention we are GDPR-compliant already". GDPR-compliant, not GDPR-like. He never brought that speaking point up. Does this mean FB can comply with GDPR everywhere but will choose not to?

madeofpalk 9y ago
It wasn't brought up in yesterday's hearings, but Facebook/MZ has actually avoided making any sort of commitment as to whether they will apply GDPR globally, or just within Europe.
- roymurdock 9y ago
  GDPR compliance limits the data they can collect, which makes their product (ad space) less valuable, which reduces order volume/price, which reduces stock price, which means they will avoid if possible.
  - madeofpalk 9y ago
    Does it actually? My understanding of GDPR is that it's more about notifications and responding to requests rather than limiting companies from doing things.
tareqak 9y ago
In terms of software, it usually takes more effort to segregate/separate features (think like an having if-statement, "IF IP-address from EUROPE" versus not), so I definitely think it's both possible and technically easier to give GDPR protections to everyone. However, there might be data storage and reporting requirements that I am unaware of and are onerous to deliver. Cynically though, giving GDPR protections to all users will probably affect the quality of their ad-targeting process, and therefore, Facebook's bottom line.
- ThrustVectoring 9y ago
  GDPR compliance seems pretty all-or-nothing. It wouldn't be sane to respond to a "hello, are you complying with GDPR for my data" letter with "You aren't a European citizen so we don't have to". If you're wrong, you get screwed over. The only sane options IMHO is either set things up to be GDPR compliant or to have zero business presence in Europe and tell them to pound sand.

mtgx 9y ago

No, he said it yesterday, too, and a week ago in a Facebook post/transcript. However, it's highly unlikely Zuckerberg is being misleading here and only certain parts they're picking and choosing will be enabled in the US. > We intend to make all the same controls and settings available everywhere, not just in Europe. Is it going to be exactly the same format? Probably not. We need to figure out what makes sense in different markets with the different laws and different places. But—let me repeat this—we’ll make all controls and settings the same everywhere, not just in Europe. https://newsroom.fb.com/news/2018/04/hard-questions-protecting-peoples-information/ https://newsroom.fb.com/news/2018/04/hard-questions-protecti... https://www.theverge.com/2018/4/11/17224492/zuckerberg-facebook-congress-gdpr-data-protection https://www.theverge.com/2018/4/11/17224492/zuckerberg-faceb...

tareqak 9y ago
unlikely or likely that Zuckerburg is misleading? Could you please clarify?

eridius 9y ago

HN linked your twitch link incorrectly, so here's the correct link: https://www.twitch.tv/washingtonpost https://www.twitch.tv/washingtonpost

tareqak 9y ago
That might have have just been me. Thanks! I'll fix it.

psyc 9y ago

I’m sure I did hear him emphasize it yesterday.