3 ms·
Um, no - The GDPR treats the simple act of storing personal data as 'processing', so turning off the service while still keeping the data resolves nothing. It d
by linker3000 8y ago
Um, no - The GDPR treats the simple act of storing personal data as 'processing', so turning off the service while still keeping the data resolves nothing. It doesn't even matter if you take the data offline, or temporarily obfuscate it.
- taysic 8y agoBut what would you be violating exactly? How could those violations be detected? It seems if the EU is so generous in not wanting to fine and you and walking you through the process, then shutting down would look like a reasonable thing to do if you are still attempting to comply.
- Hamuko 8y ago>How could those violations be detected? You can tip off the regulators if you believe that there is a violation and they will then investigate it. Instapaper is giving a pretty good reason to be suspicious.
- taysic 8y agoWhat would be in violation exactly? Not clear on this. How would regulators investigate? Do they require full access to your database/ backend?
- latk 8y agoYou are completely correct that simply blocking access does not make them compliant while they are still storing that data. But compliance isn't binary. I'm sure the data protection authorities understand the difference between “LOL I'm already noncompliant so I'll just continue business as usual” versus “Working hard to fix this – in the meanwhile, let's prevent covered Subjects from sending us more data until we are prepared to handle it compliantly.”