6 ms·

And I hope they will all get heavy fines for doing so. Let's see how well the EU will enforce the GDPR.

paulie_a 8y ago
I honestly don't get why so many sites are even paying attention to GDPR. If they don't have a presence in the EU, it is irrelevant.
- shagen 8y ago
  It is not. If their customers are in the EU they have to to comply.
  - jwineinger 8y ago
    What authority would make them comply?
  - paulie_a 8y ago
    I was specific. If I don't do business in the EU, it doesn't matter. I don't really care where my customers are but if they pay in the US, GDPR is not relevant to me. I get that everyone is super excited about GDPR, but sorry to say most websites can safely ignore it.
- lucideer 8y ago
  > If they don't have a presence in the EU Only sites with a presence in the EU are paying attention. The LA Times is a counter-example of a site that hasn't bothered with GDPR because they didn't feel EU users were worthwhile keeping. However, collecting data on the 0.5 billion people in the EU evidently seemed worthwhile for most sites.
  - gnode 8y ago
    It seems strange to me that the LA Times would cut off European users, when they presumably have to comply with the new California Consumer Privacy Act, which is similar, anyway.
- legitster 8y ago
  Because GDPR includes provisions for handling US GDPR violators, a lot of security vendors were touting up the idea that if a European fills out a form on your site or gets cookied for any reason, you could be sued.
  - jwineinger 8y ago
    So they'd file suit in the EU and... what would happen? Some sort of judgment that would prevent a company from starting business in the EU at a later date?
    - legopelle 8y ago
      Detained during their connection in Frankfurt?
    - pluma 8y ago
      I don't know. Why are EU companies paying attention to American laws, again?
      - frockington 8y ago
        Largest economy and military in the world are big reasons to play nice with America
        pluma 8y ago
        The US is not the largest economy. Whatever gave you that idea? Except for military force and incarcerations per capita, the US is lagging behind in almost every statistic compared to China or the EU.
        patrickmcnamara 8y ago
        Military doesn't come in to this at all. And similar arguments could be made for why American companies would play nice to the EU.
no1youknowz 8y ago
They won't. The ICO in the UK has already said they aren't interested in imposing fines [0]. They would much rather nudge companies into compliance. > "The fine is really a last resort," she told Computing. "Even to get to the fine we have to go through a lengthy investigation that might take several months, then we have to take it though the courts. So fines are not our go-to tool." However. I think with egregious cases like selling data. I am happy that the ICO fined a company for doing that. [1]. [0]: https://www.computing.co.uk/ctg/news/3027593/ico-theres-so-much-misinformation-out-there-on-gdpr https://www.computing.co.uk/ctg/news/3027593/ico-theres-so-m... [1]: https://www.theregister.co.uk/2018/08/09/ico_fines_data_broker_for_dpa_breach_in_labour_campaign/ https://www.theregister.co.uk/2018/08/09/ico_fines_data_brok...
- klmr 8y ago
  It’s totally OK that fines are used as a last resort. As long as they will be used as a last resort.
kodablah 8y ago
Don't we have a glimpse of (lack of) enforcement based on previous incarnations of laws like this? What about this time is special? And why are laws crafted without ample enforcement mechanisms? At the least that makes them toothless, at the most it gives a piece of legislation that can be pulled out and used only when someone wants a reason to punish a company.
- klmr 8y ago
  The difference is that GDPR does have effective enforcement mechanisms, precisely unlike previous laws. Now let’s see if they’ll be applied.
  - kodablah 8y ago
    Mechanisms in the laws or the institutions? The difference is very important and many people, who agree with the intent of the law, have been pointing out this difference for a while now. Scribbles don't make something so. If the approach of just writing it down didn't work before, why just change words instead of approaches?
    - klmr 8y ago
      Both, if I understood what you mean: The GDPR regulation ((EU) 2016/679) contains provisions for legal enforcement, and describes which process and agencies are responsible for that. Whether this actually works, only time can tell. But the fact that similar previous legislations went unenforced was a specific concern that the designers of the GDPR intended to address.

I honestly don't get why so many sites are even paying attention to GDPR. If they don't have a presence in the EU, it is irrelevant.

shagen 8y ago
It is not. If their customers are in the EU they have to to comply.
- jwineinger 8y ago
  What authority would make them comply?
- paulie_a 8y ago
  I was specific. If I don't do business in the EU, it doesn't matter. I don't really care where my customers are but if they pay in the US, GDPR is not relevant to me. I get that everyone is super excited about GDPR, but sorry to say most websites can safely ignore it.
lucideer 8y ago
> If they don't have a presence in the EU Only sites with a presence in the EU are paying attention. The LA Times is a counter-example of a site that hasn't bothered with GDPR because they didn't feel EU users were worthwhile keeping. However, collecting data on the 0.5 billion people in the EU evidently seemed worthwhile for most sites.
- gnode 8y ago
  It seems strange to me that the LA Times would cut off European users, when they presumably have to comply with the new California Consumer Privacy Act, which is similar, anyway.
legitster 8y ago
Because GDPR includes provisions for handling US GDPR violators, a lot of security vendors were touting up the idea that if a European fills out a form on your site or gets cookied for any reason, you could be sued.
- jwineinger 8y ago
  So they'd file suit in the EU and... what would happen? Some sort of judgment that would prevent a company from starting business in the EU at a later date?
  - legopelle 8y ago
    Detained during their connection in Frankfurt?
  - pluma 8y ago
    I don't know. Why are EU companies paying attention to American laws, again?
    - frockington 8y ago
      Largest economy and military in the world are big reasons to play nice with America
      - pluma 8y ago
        The US is not the largest economy. Whatever gave you that idea? Except for military force and incarcerations per capita, the US is lagging behind in almost every statistic compared to China or the EU.
      - patrickmcnamara 8y ago
        Military doesn't come in to this at all. And similar arguments could be made for why American companies would play nice to the EU.

no1youknowz 8y ago

They won't. The ICO in the UK has already said they aren't interested in imposing fines [0]. They would much rather nudge companies into compliance. > "The fine is really a last resort," she told Computing. "Even to get to the fine we have to go through a lengthy investigation that might take several months, then we have to take it though the courts. So fines are not our go-to tool." However. I think with egregious cases like selling data. I am happy that the ICO fined a company for doing that. [1]. [0]: https://www.computing.co.uk/ctg/news/3027593/ico-theres-so-much-misinformation-out-there-on-gdpr https://www.computing.co.uk/ctg/news/3027593/ico-theres-so-m... [1]: https://www.theregister.co.uk/2018/08/09/ico_fines_data_broker_for_dpa_breach_in_labour_campaign/ https://www.theregister.co.uk/2018/08/09/ico_fines_data_brok...

klmr 8y ago
It’s totally OK that fines are used as a last resort. As long as they will be used as a last resort.

kodablah 8y ago

Don't we have a glimpse of (lack of) enforcement based on previous incarnations of laws like this? What about this time is special? And why are laws crafted without ample enforcement mechanisms? At the least that makes them toothless, at the most it gives a piece of legislation that can be pulled out and used only when someone wants a reason to punish a company.

klmr 8y ago
The difference is that GDPR does have effective enforcement mechanisms, precisely unlike previous laws. Now let’s see if they’ll be applied.
- kodablah 8y ago
  Mechanisms in the laws or the institutions? The difference is very important and many people, who agree with the intent of the law, have been pointing out this difference for a while now. Scribbles don't make something so. If the approach of just writing it down didn't work before, why just change words instead of approaches?
  - klmr 8y ago
    Both, if I understood what you mean: The GDPR regulation ((EU) 2016/679) contains provisions for legal enforcement, and describes which process and agencies are responsible for that. Whether this actually works, only time can tell. But the fact that similar previous legislations went unenforced was a specific concern that the designers of the GDPR intended to address.