7 ms·

Except this forum software does provide a tool that lets the user export their own data, as well as a tool that lets an admin strip all identifying data. The o

Except this forum software does provide a tool that lets the user export their own data, as well as a tool that lets an admin strip all identifying data. The only way this targets non-European businesses is because the litigious nature of US culture seems to lead to this sort of overreaction. I'm also not sure how a malevolent user is any more incentivised to abuse this than DMCA. The DMCA lets them issue actual legal threats and action. This just allows requests. The DMCA helps big business at the expense of the general public. This does the reverse. It's no wonder there's been so much noise and scaremongering.

lajhsdfkl 8y ago
>Except this forum software does provide a tool that lets the user export their own data, as well as a tool that lets an admin strip all identifying data. Completely besides the point, there are hundreds of different pieces of forum software that may not have that feature implemented. >The only way this targets non-European businesses is because the litigious nature of US culture seems to lead to this sort of overreaction. Did I ever bring up litigation? What is your point here?
- ascorbic 8y ago
  You brought up it targeting non-European business. That was the main way it seems to have disproportionately affected them.
  - lajhsdfkl 8y ago
    How about you try answering this question I posed to you What is your point here? What is your point when you say that the EU is not litigious? Are you saying that I shouldn't expect to receive a fine for violating GDPR? Are you saying that I should just ignore GDPR data access requests if I am operating in a supposedly ethical manner and I am not selling user information?
    - ascorbic 8y ago
      I didn't see any question in there. My answer though is: respond to the request (which shouldn't be as hard as some are making out), but don't worry about fines unless you've been misusing the data or repeatedly ignoring warnings.
      - lajhsdfkl 8y ago
        Then wtf is the point of GDPR if nobody will be sued for violating it?
        ascorbic 8y ago
        The point is to make companies stop misusing data. The fines are the teeth for if they don't stop.
        lajhsdfkl 8y ago
        So I should be afraid of litigation?
        annabellish 8y ago
        No. The only reason anybody will be fined is if: a) They are doing the thing we have collectively decided is bad for society (misusing personal data) b) Do nothing about this when somebody invokes one of their new legal rights, whether that be to retrieve the data you have on them or remove the data you no longer have a grounds under any of the six legal basises to store (which includes 'consent', which can be revoked, as well as five other bases which cannot be revoked but have more limited scope with what you can do with the data) c) Be reported for this d) Refuse to work with the compliance group At this point, judging by how the EU has historically used fines as an enforcement mechanism, you're looking at a small fine designed as a wakeup call. The 20 million EUR figure (or % of revenue) is a _cap_, not a floor, and the EU has never gone for maximum fines except when it is obviously required to enforce compliance.
        8y ago
- DanBC 8y ago
  > there are hundreds of different pieces of forum software that may not have that feature implemented. "Can I have all my data?" is not new to GDPR. It has existed in previous data protection law. How did people cope before?
zeth___ 8y ago
A lot of the US over reaction to the GDPR probably stems from the fact that they assume that Europe has a system where parties sue each other, the jury system, as opposed to the state suing parties, the inquisitorial system. Getting sued in Europe is a huge deal, getting sued in the US is part of doing business.
- derReineke 8y ago
  Yeah from what I have heard the main reason for this law is to stop obvious abuses to people's privacy. It seems that most overreactions are due to ignorance of the system behind the law or to make some kind of political statement.
  - chx 8y ago
    As a proponent of North American small businesses to just stop doing business with the EU my motivation doesn't stem from the ignorance of the system rather the knowledge if it: the fines will be issued by the relevant authorities of each and every EU state according to their own interpretation. Certain countries might see this as a neat little cash grab opportunity.
    - geocar 8y ago
      Incorporating in the UK is a great way to stop this. The ICO is extremely reasonable and personable in my experience.
      - chx 8y ago
        Ever heard of Brexit?
        geocar 8y ago
        If Brexit has any impact (which is unlikely, but admittedly still unclear[1], [2]), incorporating again in Ireland or France is very easy and has similarly-minded regulators. [1]: http://researchbriefings.files.parliament.uk/documents/CBP-7838/CBP-7838.pdf http://researchbriefings.files.parliament.uk/documents/CBP-7... [2]: https://www.ft.com/content/afff45a0-1597-3f1c-a6da-79c3f61e6d2c https://www.ft.com/content/afff45a0-1597-3f1c-a6da-79c3f61e6...

lajhsdfkl 8y ago

>Except this forum software does provide a tool that lets the user export their own data, as well as a tool that lets an admin strip all identifying data. Completely besides the point, there are hundreds of different pieces of forum software that may not have that feature implemented. >The only way this targets non-European businesses is because the litigious nature of US culture seems to lead to this sort of overreaction. Did I ever bring up litigation? What is your point here?

ascorbic 8y ago
You brought up it targeting non-European business. That was the main way it seems to have disproportionately affected them.
- lajhsdfkl 8y ago
  How about you try answering this question I posed to you What is your point here? What is your point when you say that the EU is not litigious? Are you saying that I shouldn't expect to receive a fine for violating GDPR? Are you saying that I should just ignore GDPR data access requests if I am operating in a supposedly ethical manner and I am not selling user information?
  - ascorbic 8y ago
    I didn't see any question in there. My answer though is: respond to the request (which shouldn't be as hard as some are making out), but don't worry about fines unless you've been misusing the data or repeatedly ignoring warnings.
    - lajhsdfkl 8y ago
      Then wtf is the point of GDPR if nobody will be sued for violating it?
      - ascorbic 8y ago
        The point is to make companies stop misusing data. The fines are the teeth for if they don't stop.
        lajhsdfkl 8y ago
        So I should be afraid of litigation?
        annabellish 8y ago
        No. The only reason anybody will be fined is if: a) They are doing the thing we have collectively decided is bad for society (misusing personal data) b) Do nothing about this when somebody invokes one of their new legal rights, whether that be to retrieve the data you have on them or remove the data you no longer have a grounds under any of the six legal basises to store (which includes 'consent', which can be revoked, as well as five other bases which cannot be revoked but have more limited scope with what you can do with the data) c) Be reported for this d) Refuse to work with the compliance group At this point, judging by how the EU has historically used fines as an enforcement mechanism, you're looking at a small fine designed as a wakeup call. The 20 million EUR figure (or % of revenue) is a _cap_, not a floor, and the EU has never gone for maximum fines except when it is obviously required to enforce compliance.
      - 8y ago
DanBC 8y ago
> there are hundreds of different pieces of forum software that may not have that feature implemented. "Can I have all my data?" is not new to GDPR. It has existed in previous data protection law. How did people cope before?

zeth___ 8y ago

A lot of the US over reaction to the GDPR probably stems from the fact that they assume that Europe has a system where parties sue each other, the jury system, as opposed to the state suing parties, the inquisitorial system. Getting sued in Europe is a huge deal, getting sued in the US is part of doing business.

derReineke 8y ago
Yeah from what I have heard the main reason for this law is to stop obvious abuses to people's privacy. It seems that most overreactions are due to ignorance of the system behind the law or to make some kind of political statement.
- chx 8y ago
  As a proponent of North American small businesses to just stop doing business with the EU my motivation doesn't stem from the ignorance of the system rather the knowledge if it: the fines will be issued by the relevant authorities of each and every EU state according to their own interpretation. Certain countries might see this as a neat little cash grab opportunity.
  - geocar 8y ago
    Incorporating in the UK is a great way to stop this. The ICO is extremely reasonable and personable in my experience.
    - chx 8y ago
      Ever heard of Brexit?
      - geocar 8y ago
        If Brexit has any impact (which is unlikely, but admittedly still unclear[1], [2]), incorporating again in Ireland or France is very easy and has similarly-minded regulators. [1]: http://researchbriefings.files.parliament.uk/documents/CBP-7838/CBP-7838.pdf http://researchbriefings.files.parliament.uk/documents/CBP-7... [2]: https://www.ft.com/content/afff45a0-1597-3f1c-a6da-79c3f61e6d2c https://www.ft.com/content/afff45a0-1597-3f1c-a6da-79c3f61e6...