4 ms·

Nobody is really GDPR-ready, however, data privacy law is about being good enough. Yep, there isn’t full compliance ever. Instapaper looks very desperate with i

by chmars 8y ago

Nobody is really GDPR-ready, however, data privacy law is about being good enough. Yep, there isn’t full compliance ever. Instapaper looks very desperate with its GDPR-lockout of EU users. I guess the EU market is mostly lost …

adtac 8y ago
If only the EU gave these companies a 2-year headstart to become compliant. Oh wait.
- mherdeg 8y ago
  Yeah it was weird -- I remember very clearly reading about GDPR in early 2016 and then I also remember it appearing in people's development plans in late 2017/early 2018 and seeming like it was a big surprise.
- briandear 8y ago
  Even if you are 100% compliant, that doesn't protect you from getting sued or having to answer potentially hundreds of thousands of inquiries. The compliance risk is what's dangerous and challenging, not the actual "fixing" of systems. Many people in these comments seem to have no experience with business risk management. They think it's as simple as "just make data deletable." But, the technical side is the easy part. It's the getting sued part that's potentially catastrophic. Even if you "win" you still have spent thousands or tens of thousands defending. And even if you do win, you could be sued again the very next day. GDPR is more than just deleting data, it's a massive business risk to even companies doing it "right."
  - flukus 8y ago
    > Even if you are 100% compliant, that doesn't protect you from getting sued or having to answer potentially hundreds of thousands of inquiries. You can be sued at essentially anytime for any reason, long before the GDPR. If you're worried about a GDPR lawsuit ruining your company then you're either violating the GDPR or you should have shut down already because the risk was already there.
    - throwaway37585 8y ago
      > If you're worried about a GDPR lawsuit ruining your company then you're either violating the GDPR X is guilty of violating Y because they're worried about being sued for Y. Interesting legal principle. > or you should have shut down already because the risk was already there X should shut down because of the risk of being sued for Y? What?

by chmars 8y ago

adtac 8y ago

If only the EU gave these companies a 2-year headstart to become compliant. Oh wait.

mherdeg 8y ago
Yeah it was weird -- I remember very clearly reading about GDPR in early 2016 and then I also remember it appearing in people's development plans in late 2017/early 2018 and seeming like it was a big surprise.
briandear 8y ago
Even if you are 100% compliant, that doesn't protect you from getting sued or having to answer potentially hundreds of thousands of inquiries. The compliance risk is what's dangerous and challenging, not the actual "fixing" of systems. Many people in these comments seem to have no experience with business risk management. They think it's as simple as "just make data deletable." But, the technical side is the easy part. It's the getting sued part that's potentially catastrophic. Even if you "win" you still have spent thousands or tens of thousands defending. And even if you do win, you could be sued again the very next day. GDPR is more than just deleting data, it's a massive business risk to even companies doing it "right."
- flukus 8y ago
  > Even if you are 100% compliant, that doesn't protect you from getting sued or having to answer potentially hundreds of thousands of inquiries. You can be sued at essentially anytime for any reason, long before the GDPR. If you're worried about a GDPR lawsuit ruining your company then you're either violating the GDPR or you should have shut down already because the risk was already there.
  - throwaway37585 8y ago
    > If you're worried about a GDPR lawsuit ruining your company then you're either violating the GDPR X is guilty of violating Y because they're worried about being sued for Y. Interesting legal principle. > or you should have shut down already because the risk was already there X should shut down because of the risk of being sued for Y? What?