2 ms·
Neither of those points address the issues I raised, which is risk of fines. "Just comply" isn't an amazing option when I can't even comprehend the applicable l
by labster 8y ago
Neither of those points address the issues I raised, which is risk of fines. "Just comply" isn't an amazing option when I can't even comprehend the applicable law from every supervisory authority in the Union.
Right now, GDPR is like a bet, where if you win you make a small amount of money, and if you lose you lose €20 million, and no one knows what the odds are. In a year's time, you will probably see people drift back into the European market, as we'll have a better idea what the enforcement regime will actually look like.
- josteink 8y agoThe EU seeks compliance, not lawsuits. As a small actor, chances of getting fined in an initial grace-period where things are sorted out is literally zero.
- mstolpm 8y agoSo, how many cases do you know where fines are collected from small non-EU businesses? None? Okay. Why do you insist in a sum of €20 million, even if the law states that the fines (if applicable) should be reasonable and take into consideration if the non-compliance was intentional, repeated and massive? But it _is_ intentional if you block EU users you had in the past, continue to store/process/sell their collected PII without their consent and deny them a way to get information about the scope of your doing or a way to request deletion.
- labster 8y agoAs an American, it's hard to imagine a regulatory agency going after anyone when they're not seeking a fine. They have to pay for their staff somehow.