4 ms·
Note: the setup is not Data Breach -> Fine. What you'll get a fine for is: - Not reporting a major databreach promptly when you become aware of it - Not resp
by michaelbuckbee 8y ago
Note: the setup is not Data Breach -> Fine.
What you'll get a fine for is:
- Not reporting a major databreach promptly when you become aware of it
- Not responding well or taking proper steps to notify affected people
- Not taking basic precautions to safeguard data
- Being warned and then disregarding guidance (what it seems Facebook has done)
- mpweiher 8y agoExactly. I think the ratio reflects this very sensible approach. It always seemed sensible to me, but it's good to see the data confirm that, in a rough way.
- opportune 8y agowhat this creates at actual companies: PMs making $250k+ per year to sit on their asses and read about GDPR and tell you whether or not to post comms and whether you should do encryption without knowing any details about it
- Angostura 8y agoOnly at really shitty companies.
- Drakim 8y agoEven if data-breaches are not punished, we can still shame them and avoid using their product, which is a major step up from the old status quo where actively hiding the breach to avoid bad press was a legitimate strategy with very little downside.