3 ms·

Interesting. Can they still sell it if it's owned by you? They are collecting and storing it, for sure. What limitations do they have from there? Also, how w

Interesting. Can they still sell it if it's owned by you? They are collecting and storing it, for sure. What limitations do they have from there? Also, how would the government patrol this without having access to all companies databases, servers, and policies?

alkonaut 8y ago
They have to ask me if they can use it and for what purpose. And even better, they can’t condition the use of the site/product on me accepting that they sell it.
- pteredactyl 8y ago
  That sounds good. How is it enforced? ( not being sarcastic )
  - alkonaut 8y ago
    It’s not (yet). The GDPR is still new and as far as I know there haven’t been many (or perhaps not any) legal processes.
  - jdietrich 8y ago
    Every EU country has a data regulator. These regulators have a range of enforcement options at their disposal, from politely asking a company to comply up to a fine of €20m or 4% of global revenues. You can see a list of previous enforcement action and adjudication decisions by the British Information Commissioner's Office at the link below. These are all under the old Data Protection Directive, which was broadly similar to GDPR but somewhat lacking in teeth. You'll see everything from a slap on the wrist to six-figure fines. https://ico.org.uk/action-weve-taken/enforcement/ https://ico.org.uk/action-weve-taken/enforcement/ https://icosearch.ico.org.uk/s/search.html?collection=ico-meta&profile=decisions&query https://icosearch.ico.org.uk/s/search.html?collection=ico-me...
- et-al 8y ago
  Is this actually happening, though? I feel most sites don't comply with the latter half of your statement (conditioning based on acceptance).
  - alkonaut 8y ago
    This is very true. Many sites and services seem to have deliberately misinterpreted the legal text. I hope a high profile target will be taken to court over this, to establish a cautionary precedent. It just hasn’t happened yet.
simion314 8y ago
>Also, how would the government patrol this without having access to all companies databases, servers, and policies? As in many other cases you assume the companies are not doing illegal stuff and you act when someone reports them. A developer that is asked to do something illegal like hiding something from the exported data can report it .

alkonaut 8y ago

They have to ask me if they can use it and for what purpose. And even better, they can’t condition the use of the site/product on me accepting that they sell it.

pteredactyl 8y ago
That sounds good. How is it enforced? ( not being sarcastic )
- alkonaut 8y ago
  It’s not (yet). The GDPR is still new and as far as I know there haven’t been many (or perhaps not any) legal processes.
- jdietrich 8y ago
  Every EU country has a data regulator. These regulators have a range of enforcement options at their disposal, from politely asking a company to comply up to a fine of €20m or 4% of global revenues. You can see a list of previous enforcement action and adjudication decisions by the British Information Commissioner's Office at the link below. These are all under the old Data Protection Directive, which was broadly similar to GDPR but somewhat lacking in teeth. You'll see everything from a slap on the wrist to six-figure fines. https://ico.org.uk/action-weve-taken/enforcement/ https://ico.org.uk/action-weve-taken/enforcement/ https://icosearch.ico.org.uk/s/search.html?collection=ico-meta&profile=decisions&query https://icosearch.ico.org.uk/s/search.html?collection=ico-me...
et-al 8y ago
Is this actually happening, though? I feel most sites don't comply with the latter half of your statement (conditioning based on acceptance).
- alkonaut 8y ago
  This is very true. Many sites and services seem to have deliberately misinterpreted the legal text. I hope a high profile target will be taken to court over this, to establish a cautionary precedent. It just hasn’t happened yet.

simion314 8y ago

>Also, how would the government patrol this without having access to all companies databases, servers, and policies? As in many other cases you assume the companies are not doing illegal stuff and you act when someone reports them. A developer that is asked to do something illegal like hiding something from the exported data can report it .