3 ms·
> that 1 visit could mean a $20 million fine for them. I don't know what is more absurd: people repeating this on HN or those who actually started to believe t
by dvfjsdhgfv 9y ago
> that 1 visit could mean a $20 million fine for them.
I don't know what is more absurd: people repeating this on HN or those who actually started to believe this FUD.
- downandout 9y agoShow me where it is written in the GDPR that this could not possibly be the result of a single violation. It's not there. Yes, it says they should consider some things when determining the fine amount. But they still have the statutory authority to impose the maximum at their discretion regardless of any other considerations. It's not FUD when that's what the law says in black and white.
- the_mitsuhiko 9y agoHonestly: what banana republic do you assume the EU is? No way a 20 million euro fine for a first infringement of a small company would be seen as reasonable. Scaremongering neither helps you nor anyone else here.
- downandout 9y agoIf they intended for there to be safeguards, those would have been built in. They. Are. Not. There.
- stordoff 9y agoA 20€ million fine for that would not be proportionate, nor would they have taken into account the relevant factors ("the nature, gravity and duration of the infringement [...] as well as [...] and the level of damage suffered by them"). Edit: typo (proportional->proportionate)
- downandout 9y agoA 20€ million fine for that would not be proportionate By whose definition? Germany might disagree with you.
- DanBC 9y agoCan you point to any excessive fines imposed by the German regulators under existing law?
- downandout 9y agoNo, but they've never had the extraterritorial reach being claimed by the EU within the GDPR either.
- portent 9y agoI'm sure technically you are right on the written wording of the law, but you can be technically right on many subjects and make the wrong business calls. Avoiding a vanishingly small regulatory risk by making real damage to your company seems like a bad call. You could totally eliminate the risk of meteorite impact on your business by relocating down a mineshaft...
- ggg9990 9y agoCourts don’t interpret laws like a Python interpreter.
- jotm 9y agoThe GDPR is pretty restrictive, and if it's a law, the risk of a high fine is real and companies will think twice before doing business in the EU. Good for those who can comply, terrible for the rest...
- gerdesj 9y agoI'm a UK (IT) business owner, you insensitive clod 8) I like the GDPR. It's a lot easier than ISO9001/27001 and actually nearly falls out if you have those. How many times have we whined and opined about a lack of responsibility displayed towards our personal data? Now a major bloc in the world is trying to get to grips with that issue with some pretty decent legislation (IMNSHO.) Do you have any idea how difficult it is to get something like this ratified by the EU? Do you have any idea how diverse the EU actually is? Getting this thing out is a massive feat. In the EU, we all have to comply with GDPR by default - all of us from cobblers to rocket scientists. I'm sure you'll manage.
- rdiddly 9y agoAnd if they can't manage, those of us who know how to do business will be there waiting to eat their lunch.
- jotm 9y agoThank God for Brexit heh
- M2Ys4U 9y agoNot really. GDPR is already law and EU law in force before brexit will continue to remain in force when (if) brexit happens.
- joejerryronnie 9y agoWait a minute, you're not in the EU anymore! Shouldn't you be railing against the self-serving protectionist agenda of those horrible bureaucrats of Brussels?!!