4 ms·
If your business model can't be made GDPR compliant, your business model is abusive and defunct.
by pluma 8y ago
If your business model can't be made GDPR compliant, your business model is abusive and defunct.
- TomMarius 8y agoYou know every business model on Earth, or what?
- pluma 8y agoYou haven't read the GDPR, have you?
- jessaustin 8y agohttps://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679 https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELE...
- pluma 8y agoThanks for the link, but I don't think the raw legal document is the most readable form for a layperson. Here's a more structured version: https://gdpr-info.eu/ https://gdpr-info.eu/ To elaborate on my original point: the GDPR establishes privacy and data ownership as human rights. The remainder just elaborates on what that means in practice and addresses when and how business interests might outweigh those principles. If your business model is incompatible with the GDPR, this almost always means you're intentionally or carelessly violating someone's (typically at least your customers') privacy or their rights to own and control their data. Note that there are many cases where those rights can already be limited for business reasons -- we're only talking about cases where not even those exemptions cover your behavior. That's why I'm calling such business models "abusive". You're intentionally ignoring your users' rights or you're intentionally neglecting to consider their rights. I call them "defunct" because even if you exist outside the scope of the GDPR right now, you will likely eventually either enter that scope or have to cooperate with companies who do -- at which point your non-compliance will become a defect. If your non-compliance is inherent in your business model, that defect cannot be resolved.
- jessaustin 8y agoYour link makes it more clear that this regulation is 99 articles across 11 chapters. Anyone familiar with the practice of law could tell you that the interpretations of various judges and bureaucrats will multiply the material to consider. It's true that most law in most nations is like that, but even if I don't completely understand the laws where I live and work, I (perhaps foolishly) have the idea that I'm part of a conversation about those laws. If my neighbor is unfairly harmed by a law, I'll know about it and will adjust my behavior and politics accordingly. When I have lived and worked overseas, I have understood myself to be a guest and have taken particular care not to violate local norms. This thing is not like that, because it is a regional regulation intended to have global consequences. The Podunk Gazette of Podunk AL has no idea how EU regulations work or whom to lobby to get them changed. You're probably right that EU doesn't care about this newspaper, but they do care about e.g. LAT or WSJ. Where is the cutoff? Who knows? This is true even if we stipulate that GDPR has the wonderful properties you claim, which I doubt. No one running a business wants to assume something like that.
- TomMarius 8y ago> That's why I'm calling such business models "abusive". You're intentionally ignoring your users' rights or you're intentionally neglecting to consider their rights. GDPR is not just about preventing abusive behavior, though. If I sell someone my data, arguably the buyer should become its owner in full extent - GDPR makes that impossible even if both parties are fully informed and willing.