4 ms·

There is a cost to businesses in complying with and implementing regulations, regardless of the size of the business and how good or bad their behaviour has bee

by sambe 8y ago

There is a cost to businesses in complying with and implementing regulations, regardless of the size of the business and how good or bad their behaviour has been with respect to the intention of those regulations. You can't deny over-regulation by assuming only the badly-behaving people are burdened by it. Besides, there is also a cost to me: the never-ending pop-ups and acceptance dialogues, inability to access information in a straightforward manner for those that choose to block, etc. What is the percentage of users who actively control their privacy as a result of GDPR (and still happily use the website)? What is the percentage of badly -behaving businesses who will be prosecuted?

Dylan16807 8y ago
If a business can't afford basic privacy processes then it deserves to fail. The law doesn't ask for any popups, blocking is a dumb option that not many take, and for prosecutions we'll have to wait a bit longer before we see.
DCKing 8y ago
Every regulation is a trade-off. > There is a cost to businesses in complying with and implementing regulations, regardless of the size of the business and how good or bad their behaviour has been with respect to the intention of those regulations. You can't deny over-regulation by assuming only the badly-behaving people are burdened by it. Indeed - the lack of this cost of business was causing (1) reckless and (2) (deeply) unethical behaviour to become rampant [0]. I think it was fair to say it was not acceptable anymore, and I think the GDPR does a good job of formalizing rules of basic common sense about personal data protection. There's really nothing in the GDPR that I can point to that is overbearing, although of course many businesses do implement unnecessarily overbearing UX on top of it. Processing personal data should be a risk to business, and I think some basic rule of law was warranted for this risk to be clear to business. I'm not saying there is no cost to regulation. But the cost needs to be proportional to the good it achieves and I think the GDPR does that quite well. Article 13 - in my opinion - clearly will not. [0]: E.g. in unregulated countries: https://news.ycombinator.com/item?id=17081684 https://news.ycombinator.com/item?id=17081684
TheCoelacanth 8y ago
You can avoid the burden of GDPR entirely if you simply don't collect user data, and you can avoid most of it if you only collect data that you actually need.

by sambe 8y ago

Dylan16807 8y ago

If a business can't afford basic privacy processes then it deserves to fail. The law doesn't ask for any popups, blocking is a dumb option that not many take, and for prosecutions we'll have to wait a bit longer before we see.

DCKing 8y ago

Every regulation is a trade-off. > There is a cost to businesses in complying with and implementing regulations, regardless of the size of the business and how good or bad their behaviour has been with respect to the intention of those regulations. You can't deny over-regulation by assuming only the badly-behaving people are burdened by it. Indeed - the lack of this cost of business was causing (1) reckless and (2) (deeply) unethical behaviour to become rampant [0]. I think it was fair to say it was not acceptable anymore, and I think the GDPR does a good job of formalizing rules of basic common sense about personal data protection. There's really nothing in the GDPR that I can point to that is overbearing, although of course many businesses do implement unnecessarily overbearing UX on top of it. Processing personal data should be a risk to business, and I think some basic rule of law was warranted for this risk to be clear to business. I'm not saying there is no cost to regulation. But the cost needs to be proportional to the good it achieves and I think the GDPR does that quite well. Article 13 - in my opinion - clearly will not. [0]: E.g. in unregulated countries: https://news.ycombinator.com/item?id=17081684 https://news.ycombinator.com/item?id=17081684

TheCoelacanth 8y ago

You can avoid the burden of GDPR entirely if you simply don't collect user data, and you can avoid most of it if you only collect data that you actually need.