3 ms·

Or they are not actually doing anything shady, but the revenue coming in from the EU is not sufficient to justify the increased costs and liabilities.

geofft 8y ago
Do you have an example of this? I totally believe this is possible, but every thing I've seen in practice has matched GP's description.
- megaman22 8y ago
  There was at least one that landed on the front page this week. https://news.ycombinator.com/item?id=16954306 https://news.ycombinator.com/item?id=16954306
  - geofft 8y ago
    Thanks. Interesting that some folks in the comments say "actually, this site was abusing your data to make money" - but I don't have a good sense of whether a similar site that didn't use Amazon ads, and either took a small membership fee or was run out of the founder's pocket as a side project, would have things to worry about from GDPR. On the flip side, does anyone know of side projects or community projects that have said "We chatted with a European lawyer, who said we don't have anything to worry about, and we'll keep doing our thing"? I know Debian is having that chat (https://lists.debian.org/debian-devel-announce/2018/04/msg00012.html https://lists.debian.org/debian-devel-announce/2018/04/msg00... - and there are some privacy things I think Debian should change, like not keeping people's support emails from years ago public) but I'm curious about projects that are smaller in scope and are basically not trying to hold personal data at all.
    - y_molodtsov 8y ago
      There also was some online game that did the same, I doubt they had a lot of user data.
krapp 8y ago
> Or they are not actually doing anything shady, but the revenue coming in from the EU is not sufficient to justify the increased costs and liabilities. Refusing to protect your users from your own predatory use of their personal data because the ROI isn't there is still shady.

geofft 8y ago

Do you have an example of this? I totally believe this is possible, but every thing I've seen in practice has matched GP's description.

megaman22 8y ago
There was at least one that landed on the front page this week. https://news.ycombinator.com/item?id=16954306 https://news.ycombinator.com/item?id=16954306
- geofft 8y ago
  Thanks. Interesting that some folks in the comments say "actually, this site was abusing your data to make money" - but I don't have a good sense of whether a similar site that didn't use Amazon ads, and either took a small membership fee or was run out of the founder's pocket as a side project, would have things to worry about from GDPR. On the flip side, does anyone know of side projects or community projects that have said "We chatted with a European lawyer, who said we don't have anything to worry about, and we'll keep doing our thing"? I know Debian is having that chat (https://lists.debian.org/debian-devel-announce/2018/04/msg00012.html https://lists.debian.org/debian-devel-announce/2018/04/msg00... - and there are some privacy things I think Debian should change, like not keeping people's support emails from years ago public) but I'm curious about projects that are smaller in scope and are basically not trying to hold personal data at all.
  - y_molodtsov 8y ago
    There also was some online game that did the same, I doubt they had a lot of user data.

krapp 8y ago

> Or they are not actually doing anything shady, but the revenue coming in from the EU is not sufficient to justify the increased costs and liabilities. Refusing to protect your users from your own predatory use of their personal data because the ROI isn't there is still shady.