4 ms·

I think the GDPR is not as bad as people claim. At least it is really done against the industry and in favour of the people. Interesting will be the e privacy d

by tehabe 8y ago

I think the GDPR is not as bad as people claim. At least it is really done against the industry and in favour of the people. Interesting will be the e privacy directive, which could mandate that websites and ad networks respect the Do Not Track settings in browsers. Which would also get rid of many cookie warnings. Anyway, now it is not the time to stay idle, it is time to call your MEP and campaign against link tax (article 11) and upload filters (article 13). https://saveyourinternet.eu/ https://saveyourinternet.eu/ After that the next fight will be when the trilogue between Commission, Council, and Parliament is done.

Ensorceled 8y ago
There are very few things that can utterly destroy my small business, even forgetting to file my HST was a minor fine. GDPR is one of those things.
- DanBC 8y ago
  GDPR cannot destroy your business, because GDPR penalties have to be proportionate. You mention forgeting to file some paperwork: here's an example of an organisation handling sensitive medical data who, by law, have to register with the regulator. They didn't register. https://www.bloomberg.com/news/articles/2018-04-26/u-k-healthcare-startup-cera-is-said-to-have-posted-fake-reviews https://www.bloomberg.com/news/articles/2018-04-26/u-k-healt... > The U.K.’s Data Protection Act requires all organizations processing personal information to register with the U.K. data regulator. Although handling sensitive data on recent patients and those needing regular health care, Cera also failed to register with the Information Commissioner’s Office until February this year. The ICO said in a statement that it would only consider “enforcement action” if a company failed to register despite ICO advice. They didn't even get a fine. (Maximum available fine at the time: £500,000.)
repolfx 8y ago
Wait, why is the metric we're using to judge legislation whether it's "against industry" and "for the people"? This sort of viewpoint will just reinforce American stereotypes that all of Europe is some French-style capitalist hating blob. Industry is people! GDPR hurts the most for small firms created and run by people who already spent years slaving away at large corporations and decided to strike out on their own, only to be squashed by huge compliance costs that Google can pay but they cannot. Also, this whole "GDPR has good intentions therefore it's good" idea that is cropping up on this thread is very problematic. We don't judge laws by their intentions but by their outcomes.
- tehabe 8y ago
  It is a metric in case of many laws because of the huge amount of industry lobbying which prevents laws which benefit the common good and only benefit the short term goal of the industry, like this copyright law. Copyright came about to support and foster creativity, it was meant as new form of property because creativity has no clear boundaries. About the intentions of the GDPR, they were clearly to give people more control over their data and give business more restriction. The basic rule of the GDPR that companies should only store the data they really need at that time not more, not less. Overall this is what the GDPR does. My issues are more like, in some cases the burden for SME are too high and too weird for consumers. Like increasing the age limit from 13 to 16 or demanding complex privacy policies which no-one reads The GDPR should have been the basic privacy policy for everyone, only if you do something different you have to transparent about it. Like transferring data to a third party.

by tehabe 8y ago

Ensorceled 8y ago

There are very few things that can utterly destroy my small business, even forgetting to file my HST was a minor fine. GDPR is one of those things.

DanBC 8y ago
GDPR cannot destroy your business, because GDPR penalties have to be proportionate. You mention forgeting to file some paperwork: here's an example of an organisation handling sensitive medical data who, by law, have to register with the regulator. They didn't register. https://www.bloomberg.com/news/articles/2018-04-26/u-k-healthcare-startup-cera-is-said-to-have-posted-fake-reviews https://www.bloomberg.com/news/articles/2018-04-26/u-k-healt... > The U.K.’s Data Protection Act requires all organizations processing personal information to register with the U.K. data regulator. Although handling sensitive data on recent patients and those needing regular health care, Cera also failed to register with the Information Commissioner’s Office until February this year. The ICO said in a statement that it would only consider “enforcement action” if a company failed to register despite ICO advice. They didn't even get a fine. (Maximum available fine at the time: £500,000.)

repolfx 8y ago

Wait, why is the metric we're using to judge legislation whether it's "against industry" and "for the people"? This sort of viewpoint will just reinforce American stereotypes that all of Europe is some French-style capitalist hating blob. Industry is people! GDPR hurts the most for small firms created and run by people who already spent years slaving away at large corporations and decided to strike out on their own, only to be squashed by huge compliance costs that Google can pay but they cannot. Also, this whole "GDPR has good intentions therefore it's good" idea that is cropping up on this thread is very problematic. We don't judge laws by their intentions but by their outcomes.

tehabe 8y ago
It is a metric in case of many laws because of the huge amount of industry lobbying which prevents laws which benefit the common good and only benefit the short term goal of the industry, like this copyright law. Copyright came about to support and foster creativity, it was meant as new form of property because creativity has no clear boundaries. About the intentions of the GDPR, they were clearly to give people more control over their data and give business more restriction. The basic rule of the GDPR that companies should only store the data they really need at that time not more, not less. Overall this is what the GDPR does. My issues are more like, in some cases the burden for SME are too high and too weird for consumers. Like increasing the age limit from 13 to 16 or demanding complex privacy policies which no-one reads The GDPR should have been the basic privacy policy for everyone, only if you do something different you have to transparent about it. Like transferring data to a third party.