3 ms·
If you're a small or medium sized non-tech publisher who outsourced the building of your digital publishing system 5 years ago and have been cruising along ever
by m_fayer 8y ago
If you're a small or medium sized non-tech publisher who outsourced the building of your digital publishing system 5 years ago and have been cruising along ever since, you might not be very motivated to spend real cash on a big new IT project to ensure your various server logs don't have IP addresses or other "personally identifying information" in them, just to name an example.
- ghaff 8y agoAnd, in this case, a local newspaper in a relatively small market. Their exposure is probably pretty limited but it's not hard to imagine a legal or compliance person asked IT is they were compliant with GPDR and the answer came back "dunno." At which point, the decision is between spend an hour to cut off EU access, decide to deliberately sweep any potential problem under the rug, or spend a fair bit of effort to do at least a compliance audit. #1 doesn't seem like a bad choice in this situation.