8 ms·

If I ignore GDPR for the next year or so, waiting until this all simmers down to a level of abstraction below the surface level I care about, will I be any wors

by tw1010 8y ago

If I ignore GDPR for the next year or so, waiting until this all simmers down to a level of abstraction below the surface level I care about, will I be any worse off?

jcims 8y ago
In the threads like 'Removing Monal from the EU' [1] most folks say you'll get a warning before any enforcement is done. You could try rolling the dice on that. 1 - https://news.ycombinator.com/item?id=17095217 https://news.ycombinator.com/item?id=17095217
Elidrake24 8y ago
Depends on the size of the company you're doing work for, really.
- yulaow 8y ago
  Also on the type of data. If you are using super sensitive data (eg health profiles/histories of people) you better not risk because you are gonna get hit hard.
reilly3000 8y ago
I think in the larger cultural context, the public at large is getting more aware of and concerned about data collection. If you don’t have large amounts of PII on EU residents then simmer. If you might, don’t be the one they make an example of.
deleted 8y ago
[deleted]
Maybestring 8y ago
If your company is okay with the ethical/legal reality of breaking the law for a year, why not just keep at it?
zitterbewegung 8y ago
I think that Jacques Mattheij has some thoughts about this that you can think about it in the abstractions that he gives. Note that IANAL and YMMV. EDIT: Also Jacques is not a Lawyer either. 1: https://jacquesmattheij.com/gdpr-hysteria https://jacquesmattheij.com/gdpr-hysteria
- ryanwaggoner 8y ago
  Yeah, Jacques is not a lawyer either. As far as I can tell, he’s just a random GDPR fan and armchair lawyer with a blog and an incredibly biased and unrealistic view of the GDPR. You’d be foolish to rely on his advice if you’re possibly in a situation where it matters. Consult an actual expert.
  - zerostar07 8y ago
    To be fair there are no experts able to guarantee their advice is good. They often disagree as the law is incredibly vague. And the EU DPAs are not ready to apply the law. Relevant laws have not even passed in many EU countries: https://www.reuters.com/article/us-europe-privacy-analysis/european-regulators-were-not-ready-for-new-privacy-law-idUSKBN1I915X https://www.reuters.com/article/us-europe-privacy-analysis/e...
    - ryanwaggoner 8y ago
      I am the first to agree that this is a terrible law, incredibly vague, overly broad, poorly written, etc. The difference between actual experts and people like Jacques is that credible experts recognize the complexity and will be honest about it. Granted, it’s in their interest to do so, but still, at least the better ones won’t lie and tell you it’s simple just because they wish it was. Not to mention accusing you of bad intent and doing shady things if you don’t quickly agree that the law is perfectly clear and simple and that any compliance costs are worth it if you’re honest. After all, only an evil person would avoid the EU market with the stated reason that the compliance costs seem too high or the law too vague, because random blogger Jacques already cleared that up for us :)
zerostar07 8y ago
you can wait a reasonable amount of time before adequate measures must be taken for appropriate procedures.

by tw1010 8y ago

If I ignore GDPR for the next year or so, waiting until this all simmers down to a level of abstraction below the surface level I care about, will I be any worse off?

jcims 8y ago

In the threads like 'Removing Monal from the EU' [1] most folks say you'll get a warning before any enforcement is done. You could try rolling the dice on that. 1 - https://news.ycombinator.com/item?id=17095217 https://news.ycombinator.com/item?id=17095217

Elidrake24 8y ago

Depends on the size of the company you're doing work for, really.

yulaow 8y ago
Also on the type of data. If you are using super sensitive data (eg health profiles/histories of people) you better not risk because you are gonna get hit hard.

reilly3000 8y ago

I think in the larger cultural context, the public at large is getting more aware of and concerned about data collection. If you don’t have large amounts of PII on EU residents then simmer. If you might, don’t be the one they make an example of.

deleted 8y ago

[deleted]

Maybestring 8y ago

If your company is okay with the ethical/legal reality of breaking the law for a year, why not just keep at it?

zitterbewegung 8y ago

I think that Jacques Mattheij has some thoughts about this that you can think about it in the abstractions that he gives. Note that IANAL and YMMV. EDIT: Also Jacques is not a Lawyer either. 1: https://jacquesmattheij.com/gdpr-hysteria https://jacquesmattheij.com/gdpr-hysteria

ryanwaggoner 8y ago
Yeah, Jacques is not a lawyer either. As far as I can tell, he’s just a random GDPR fan and armchair lawyer with a blog and an incredibly biased and unrealistic view of the GDPR. You’d be foolish to rely on his advice if you’re possibly in a situation where it matters. Consult an actual expert.
- zerostar07 8y ago
  To be fair there are no experts able to guarantee their advice is good. They often disagree as the law is incredibly vague. And the EU DPAs are not ready to apply the law. Relevant laws have not even passed in many EU countries: https://www.reuters.com/article/us-europe-privacy-analysis/european-regulators-were-not-ready-for-new-privacy-law-idUSKBN1I915X https://www.reuters.com/article/us-europe-privacy-analysis/e...
  - ryanwaggoner 8y ago
    I am the first to agree that this is a terrible law, incredibly vague, overly broad, poorly written, etc. The difference between actual experts and people like Jacques is that credible experts recognize the complexity and will be honest about it. Granted, it’s in their interest to do so, but still, at least the better ones won’t lie and tell you it’s simple just because they wish it was. Not to mention accusing you of bad intent and doing shady things if you don’t quickly agree that the law is perfectly clear and simple and that any compliance costs are worth it if you’re honest. After all, only an evil person would avoid the EU market with the stated reason that the compliance costs seem too high or the law too vague, because random blogger Jacques already cleared that up for us :)

zerostar07 8y ago

you can wait a reasonable amount of time before adequate measures must be taken for appropriate procedures.