4 ms·
If you are an European company, most of this stuff has been the law for decades! Running a project/company means taking on risk. Financially and otherwise. Why
by svennek 8y ago
If you are an European company, most of this stuff has been the law for decades!
Running a project/company means taking on risk. Financially and otherwise. Why is data-care risk so much worse?
And sueing is only going to happen in the US.
In Europe getting sued is extremely rare. I expect most DPA (gov bodies handling this) starts out with a kindly worded letter. You comply, nothing happened.. (Most other legislation works this way in Europe already). Fines are mostly for repeat-offenders or clearly black sheep.
In the US, who knows... Most europeans are baffled by the courts and cases in the US. But I think US companies have to be handled by an EU DPA anyways, so we are back to the letter again..
I run a small company (two employees) and I am not concerned. I know a lot of small companies, they are mostly not concerned. I know a few larger companies, they are not concerned (unless they have data handling as their main business).
My own work in this has been somewhere in the neighbourhood of a workweek. Not any worse than complying with tax-law...
There is also no "automatic 20M euro fine". Most matters are likely handled by a kindly- or sternly worded letter, or a small fine (in the 5-20k EUR range for small companies, which sucks but shouldn't kill you....
- hvidgaard 8y agoI work at a company that stores highly confidential PII. Statements from doctors and the like are just some of the documents our system handle. We're not that concerned. The general consensus is be responsible with the data, make it possible to actually delete something, and show reasonable effort to implement the directives or have a reasonable plan on how and when to implement it reasonably. It's not a big deal as this is how it should have been done in the first place. Only not it's formalized into law.
- Mirioron 8y agoYou're very naive about this situation. Just because the possibility legally exists already means that you're taking this into account when calculating risk. Also, EU tax-law is one of the reasons that small digital businesses have suffered in recent years. The VAT fiasco was very poorly handled and it's still ongoing.
- svennek 8y agoWhat? (disclaimer: i don't sell services outside a few countries) There is a solution called One Stop VAT where all comminication and reporting goes to your home-country (given you are an EU company). All your taxes are then calculated at your local rate (as I understand it), execpt for companies with a valid VAT-number, where reverse tax is standard (i.e. zero-rated tax). https://europa.eu/youreurope/business/vat-customs/moss-scheme/index_en.htm https://europa.eu/youreurope/business/vat-customs/moss-schem...