4 ms·

Complying with the GDPR is not really a cost thing, unless you count loss of revenue from not squeezing everything you can out of user data.

• komali2 8y ago
  I think the fear is that troll law firms will sprout up that get really good and nailing smaller companies for a minor, relatively harmless infraction.
  • stefano 8y ago
    What would they gain? The company would get a warning from an officer telling them they're not compliant and to address it. If the company fixes the issue, all good. If it doesn't, it gets fined. The troll law firm won't see any money from that fine.
  • DanBC 8y ago
    That's not how GDPR is enforced. A relatively minor, harmless infraction will get at most a letter from the regulator asking for it to be fixed. More likely is that fuck all will happen, which is what currently happens in the UK.
    • komali2 8y ago
      Huh, I thought it was grounds for a hefty fine right off the bat. What about horns being trumpeted that GDPR is going to stifle innovation (smaller companies unable to muster the legal force to comply)?
      • jinglebells 8y ago
        They want you to comply, first and foremost. If you comply, then no fines. If you don't comply, you'll get fined, that's how I understand. GDPR is a process, it's about pushing companies to good practices through compliance. A lot of it makes sense, for example, making sure your staff understand basic IT security practices, which is no different to health and safety.