5 ms·

This is one of the less appreciated clauses of the GDPR: That companies are required to disclose data breaches within a reasonable time-frame, and users have th

This is one of the less appreciated clauses of the GDPR: That companies are required to disclose data breaches within a reasonable time-frame, and users have the right to know about any exposure of their data.

behringer 8y ago
It sounds like they did that but TC wants more. I'm not really sure why HN allows techcrunch stories on the front page. TC is tabloid journalism at its finest.
- giancarlostoro 8y ago
  There's been now and then reasonable TC articles that produced good conversations here on HN though. They also make mention of a reasonable number of startups which is obviously something that sparks interest to many here on HN.
- p49k 8y ago
  They did not disclose any of the following as specified by the data breach notification requirements of the GDPR: The name and contact details of the data protection officer or other contact point where more information can be obtained The likely consequences of the personal data breach The measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects The are also required to submit the following information to EU authorities, but have given no indication that they have done so or are planning to: The categories and approximate number of data subjects concerned The categories and approximate number of personal data records concerned The mail that Amazon sent to affected customers was barebones and contained almost no information.
  - behringer 8y ago
    We could really use a good journalist to go out and find the answers to those questions right about now.
  - ganeshkrishnan 8y ago
    I think only Amazon Europe account was leaked. We have account in couple of countries and I got the email only on my UK account.
    - ZuBB 8y ago
      I am in Eastern Europe and have account only in US Amazon. This morning I also got that email..
    - jessaustin 8y ago
      I live in USA, have only ever used Amazon in USA, and I got the email.
    - beezle 8y ago
      I am in the US and got the email to my personal account, not my seller account.
  - ghusbands 8y ago
    They probably aren't obliged to speak to TechCrunh or any of the media about it, though.
- switch007 8y ago
  > It sounds like they did Which parts of the specific GDPR requirements did they comply with?
  - behringer 8y ago
    GDPR isn't a US law.
    - cyphar 8y ago
      But Amazon is an EU company. They're incorporated in Luxembourg in order to avoid taxes, making them subject to EU laws (after all, they are subject to Luxembourg tax laws -- that's why they structured their business that way). You can't have your cake and eat it.
kodablah 8y ago
> This is one of the less appreciated clauses of the GDPR One wonders if this clause should have instead been its own, separate, narrowly focused legislation and enforced specifically as such.
- markovbot 8y ago
  Any particular reason? Seems like a reasonable thing for the GDPR to have.
  - kodablah 8y ago
    Same reason you might do a gradual refractor instead of a large software rewrite. The more narrowly scoped a piece of legislation, the more feedback and implementation/enforcement can be tailored to the satisfaction of all before increasing scope (or not if ineffective). In the GDPR's case, it superseded existing data protection legislation because of a somewhat opposite mindset: the scope/consequences/enforcement weren't large enough. Also, such size potentially dilutes differing priorities by lumping several goals together thereby marrying its implementation success/failure to the general success/failure of the overall legislation.
    - davewritescode 8y ago
      Writing laws is like writing software in every way except: 1. You have hundreds of code reviewers, many of whom will have their own motivations 2. The code base is hundreds of years old, poorly maintained and often contradictory in its goals. 3. You have hundreds of millions users.
      - aidenn0 8y ago
        4. the machine that executes the code is ill-defined and will change far before the code you write is retired.
        coolaliasbro 8y ago

behringer 8y ago

It sounds like they did that but TC wants more. I'm not really sure why HN allows techcrunch stories on the front page. TC is tabloid journalism at its finest.

giancarlostoro 8y ago
There's been now and then reasonable TC articles that produced good conversations here on HN though. They also make mention of a reasonable number of startups which is obviously something that sparks interest to many here on HN.
p49k 8y ago
They did not disclose any of the following as specified by the data breach notification requirements of the GDPR: The name and contact details of the data protection officer or other contact point where more information can be obtained The likely consequences of the personal data breach The measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects The are also required to submit the following information to EU authorities, but have given no indication that they have done so or are planning to: The categories and approximate number of data subjects concerned The categories and approximate number of personal data records concerned The mail that Amazon sent to affected customers was barebones and contained almost no information.
- behringer 8y ago
  We could really use a good journalist to go out and find the answers to those questions right about now.
- ganeshkrishnan 8y ago
  I think only Amazon Europe account was leaked. We have account in couple of countries and I got the email only on my UK account.
  - ZuBB 8y ago
    I am in Eastern Europe and have account only in US Amazon. This morning I also got that email..
  - jessaustin 8y ago
    I live in USA, have only ever used Amazon in USA, and I got the email.
  - beezle 8y ago
    I am in the US and got the email to my personal account, not my seller account.
- ghusbands 8y ago
  They probably aren't obliged to speak to TechCrunh or any of the media about it, though.
switch007 8y ago
> It sounds like they did Which parts of the specific GDPR requirements did they comply with?
- behringer 8y ago
  GDPR isn't a US law.
  - cyphar 8y ago
    But Amazon is an EU company. They're incorporated in Luxembourg in order to avoid taxes, making them subject to EU laws (after all, they are subject to Luxembourg tax laws -- that's why they structured their business that way). You can't have your cake and eat it.

kodablah 8y ago

> This is one of the less appreciated clauses of the GDPR One wonders if this clause should have instead been its own, separate, narrowly focused legislation and enforced specifically as such.

markovbot 8y ago
Any particular reason? Seems like a reasonable thing for the GDPR to have.
- kodablah 8y ago
  Same reason you might do a gradual refractor instead of a large software rewrite. The more narrowly scoped a piece of legislation, the more feedback and implementation/enforcement can be tailored to the satisfaction of all before increasing scope (or not if ineffective). In the GDPR's case, it superseded existing data protection legislation because of a somewhat opposite mindset: the scope/consequences/enforcement weren't large enough. Also, such size potentially dilutes differing priorities by lumping several goals together thereby marrying its implementation success/failure to the general success/failure of the overall legislation.
  - davewritescode 8y ago
    Writing laws is like writing software in every way except: 1. You have hundreds of code reviewers, many of whom will have their own motivations 2. The code base is hundreds of years old, poorly maintained and often contradictory in its goals. 3. You have hundreds of millions users.
    - aidenn0 8y ago
      4. the machine that executes the code is ill-defined and will change far before the code you write is retired.
      - coolaliasbro 8y ago