4 ms·

but wouldn't a fine that's actually sizable send a different signal? I don't get how google can violate somthing like this and the only results is the enforece

but wouldn't a fine that's actually sizable send a different signal? I don't get how google can violate somthing like this and the only results is the enforecement of existing law and some fine? Or I am not getting something?

Despegar 8y ago
GDPR would have allowed fines of up to 4% of Google's global turnover. That's a bazooka you don't use for every infraction. If Google is found to be a repeat offender or fails to comply, that's probably when regulators will use that particular tool in their toolbox.
- luckylion 8y ago
  > That's a bazooka you don't use for every infraction. Use it once, and you won't have to use it again. I don't know the usual english translation of a quote attributed to Mao: punish one, teach one hundred. Handing out fines that actually hurt will not only teach those that receive it but also everybody else. Making knuddels.de pay €20k for leaking the data (including clear text passwords) of millions of users just says "do as you please, here's a symbolic fine, we don't mind".
  - SpicyLemonZest 8y ago
    I mean, there's a reason that quote is attributed to Mao. When regulators fire off ruinous fines as a first resort, the lesson companies learn is not that everything will be okay if they follow the rules.
    - luckylion 8y ago
      You're probably right, they don't want to hurt the actors on the first offence. We shall see whether it will turn into a three-strikes system, or remain in a rather pedagogical western european fashion. It does remind me off Google vs SEO-Black-Hat-Spammers. They get caught, the get a manual penalty, they remove the worst, say they're sorry, the penalty gets lifted, they continue on.
  - notahacker 8y ago
    The $50bn fine gets paid and steps taken to comply in future. The $4bn fine gets more appeals and politicians dragged in.
pgeorgi 8y ago
> the only results is the enforcement of existing law and some fine? The job of European data protection agencies isn't to be punitive, but to ensure compliance. If the issue was tiny, an honest mistake that was promptly fixed when it was brought to the offender's attention, and they show that they implement safeguards so that something like that won't happen again, there may be no fine at all. Compared to this, EUR 50M is rather heavy handed, but given that Google has approximately $infinity at their disposal, no value would "ensure compliance". What this does is ensure that the topic will be discussed by the board of directors (50M is probably beyond the discretionary spending budget of the not-quite-top level manager who handled this) with the outlook that there may be more fines like that. OTOH it's still far from that "4% of global revenue" figure, so it gives room for escalation. Hopefully it's also small enough that it won't be disfigured too much into "the evil EU is being protectionist again!" US press cycle that comes up every time a US company is fined by some EU body.
- luckylion 8y ago
  > The job of European data protection agencies isn't to be punitive, but to ensure compliance. Wouldn't larger fines ensure compliance though?
  - ldng 8y ago
    Well next fine, if nothing is done to comply, will be heavier. For better or worse, that's how it is intended to work.
SpicyLemonZest 8y ago
It would send a different signal that France doesn't necessarily want to send. If the fine for having a bad UX over passable data privacy configurations is billions of dollars, and the fine for not making an effort at all is also billions of dollars, that doesn't really encourage the right behavior.
LanceH 8y ago
Larger fines can tell companies at large that it is unsafe to do business in that jurisdiction.

Despegar 8y ago

GDPR would have allowed fines of up to 4% of Google's global turnover. That's a bazooka you don't use for every infraction. If Google is found to be a repeat offender or fails to comply, that's probably when regulators will use that particular tool in their toolbox.

luckylion 8y ago
> That's a bazooka you don't use for every infraction. Use it once, and you won't have to use it again. I don't know the usual english translation of a quote attributed to Mao: punish one, teach one hundred. Handing out fines that actually hurt will not only teach those that receive it but also everybody else. Making knuddels.de pay €20k for leaking the data (including clear text passwords) of millions of users just says "do as you please, here's a symbolic fine, we don't mind".
- SpicyLemonZest 8y ago
  I mean, there's a reason that quote is attributed to Mao. When regulators fire off ruinous fines as a first resort, the lesson companies learn is not that everything will be okay if they follow the rules.
  - luckylion 8y ago
    You're probably right, they don't want to hurt the actors on the first offence. We shall see whether it will turn into a three-strikes system, or remain in a rather pedagogical western european fashion. It does remind me off Google vs SEO-Black-Hat-Spammers. They get caught, the get a manual penalty, they remove the worst, say they're sorry, the penalty gets lifted, they continue on.
- notahacker 8y ago
  The $50bn fine gets paid and steps taken to comply in future. The $4bn fine gets more appeals and politicians dragged in.

pgeorgi 8y ago

> the only results is the enforcement of existing law and some fine? The job of European data protection agencies isn't to be punitive, but to ensure compliance. If the issue was tiny, an honest mistake that was promptly fixed when it was brought to the offender's attention, and they show that they implement safeguards so that something like that won't happen again, there may be no fine at all. Compared to this, EUR 50M is rather heavy handed, but given that Google has approximately $infinity at their disposal, no value would "ensure compliance". What this does is ensure that the topic will be discussed by the board of directors (50M is probably beyond the discretionary spending budget of the not-quite-top level manager who handled this) with the outlook that there may be more fines like that. OTOH it's still far from that "4% of global revenue" figure, so it gives room for escalation. Hopefully it's also small enough that it won't be disfigured too much into "the evil EU is being protectionist again!" US press cycle that comes up every time a US company is fined by some EU body.

luckylion 8y ago
> The job of European data protection agencies isn't to be punitive, but to ensure compliance. Wouldn't larger fines ensure compliance though?
- ldng 8y ago
  Well next fine, if nothing is done to comply, will be heavier. For better or worse, that's how it is intended to work.

SpicyLemonZest 8y ago

It would send a different signal that France doesn't necessarily want to send. If the fine for having a bad UX over passable data privacy configurations is billions of dollars, and the fine for not making an effort at all is also billions of dollars, that doesn't really encourage the right behavior.

LanceH 8y ago

Larger fines can tell companies at large that it is unsafe to do business in that jurisdiction.