3 ms·
> (which some will quickly point out is very GDPR-like) I hope not. Knowing what data is collected and when is rarely argued against by anyone. Requiring the a
by kodablah 8y ago
> (which some will quickly point out is very GDPR-like)
I hope not. Knowing what data is collected and when is rarely argued against by anyone. Requiring the ability to provide it, provide services without it, large penalty maximums, explicit opt-in requirement, vagueness, non-enforceability, etc (etc, etc, etc) are often what people complain about wrt overreach.
- redbeard0x0a 8y ago> Large Penalty Maximums This is needed, otherwise there is no real reason to actually protect personal data. Equifax losing the personal data for 50% of Americans should have resulted in major penalties due to the nature of their security. The other requirements raise the cost of storing this data closer to the damage that can be done by the loss/theft of that data (from the perspective of the data subject).