5 ms·
You can collect email addresses still, so long as you have a legitimate reason to, you seek consent, you store them securely and remove them if consent is withd
by sbuk 8y ago
You can collect email addresses still, so long as you have a legitimate reason to, you seek consent, you store them securely and remove them if consent is withdrawn. These are things that you should be doing anyway! Even if it's an open source side project.
- riantogo 8y agoSure. But let’s not pretend that it is cheap to do. All I’m saying that if you are cheering govt stepping into the equation then let’s have an honest discussion on who it hurts and who it benefits. Let’s take a stock of the impact to garage innovations. That is all.
- jwalton 8y agoAre you aware that it was illegal for you to collection email addresses from Canadians without their consent, due to [PIPEDA](https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_consent/ https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-can...), long before the GDPR ever came into effect?
- deleted 8y ago[deleted]
- sbuk 8y agoOK. Why is forcing people to consider the ethics of gathering data that have hither to proven to be lacking morally and ethically a bad thing? In terms of "impact to garage innovations", there shouldn't be any if there is nothing nefarious about it. The cost of designing and engineering software ethically is minimal.
- lajhsdfkl 8y ago>You can collect email addresses still, so long as you have a legitimate reason to, you seek consent, you store them securely and remove them if consent is withdrawn. These are things that you should be doing anyway! Even if it's an open source side project. Where in your statement do you refute the fact that it is hard to comply with GDPR? Even if you have a legitimate use case you still need to provide users a way to access all their information and delete all their information. If you already are using more than one database this is not trivial. This is my guesstimate but I am confident in saying that GDPR adds $25k worth of work to the cost of starting up a business in the EU assuming an experienced software engineer is worth $150k a year. There will simply be a huge layer of boiler plate code added to every project now that will be necessary whenever you are processing data.
- M2Ys4U 8y ago>Even if you have a legitimate use case you still need to provide users a way to access all their information and delete all their information. Which, in the EU at least, you have had to do for decades under the Data Protection Directive.
- sbuk 8y agoSo what you're saying is that it will cost money to retrospectively fix a badly designed service? Good.
- Daishiman 8y agoIf you know what you're doing you know how store data in a GDPR-compliant way anyway.