3 ms·

That's the crux of it. It's not asking companies to do anything they shouldn't have already been doing if they were conscious about security. The problem is it

That's the crux of it. It's not asking companies to do anything they shouldn't have already been doing if they were conscious about security. The problem is it's been blown completely out of proportion to a point where by son's child minder sent out letters asking for our permission to contact us if our child is unwell (Of course she should - that isn't unsolicited contact. She was already covered!).

martin_a 8y ago
> The problem is it's been blown completely out of proportion [...] Yeah, but blame that on the lawyers who wanted to cash in on this new regulation. I think only _very few_ people/business owners actually took the time to read the GDPR and think about whether all of that even applies to them. Most just became a victim of the fearmongering around all of that.
- pushpop 8y ago
  I've seen a lot of scaremongering but none of that was from lawyers. My observations was most of the negativity came from a combination of the press writing slanted articles criticising the EU (which is fairly typical for anything relating to the EU, it seems) and blogs from people who assumed the worst case and subsequently wrote a hysteria-driven knee-jerk opinion piece as a result. Those blogs, I've found, are the worst examples because they're more likely to spread like a virus where people say "if they're worried then I should be to!" Where as these days people can dismiss the press a little easier if it doesn't confirm their cognitive bias. That's just my opinion from what I've observed though. I'm not trying to claim anything as fact here.
  - martin_a 8y ago
    I'm with you on that after a second thought. Our lawyers where rather calm, too, saying that not everything is eaten as hot as its being cooked. "Selfmade media" on the other hand went really wild and fantasized some absurd threats for everybody with a website, you're right on that.
Nasrudith 8y ago
Not quite actually - sensible practice from a security standpoint alone (as opposed to transparency) would be to have a delete but not a download button as it would make exfiltrating data with a compromised account easier. That is the flipside of power to the user - more exploitability. I don't blame them for the goal (right to know is a valid interest for consumers) but we have to acknowledge consequences if we want to avoid future errors. The back up clearing involved would also be a pain in the ass and boost expenses of compliance (can't just use write only storage which nicely solves other problems) but it isn't insurmountable.

martin_a 8y ago

> The problem is it's been blown completely out of proportion [...] Yeah, but blame that on the lawyers who wanted to cash in on this new regulation. I think only _very few_ people/business owners actually took the time to read the GDPR and think about whether all of that even applies to them. Most just became a victim of the fearmongering around all of that.

pushpop 8y ago
I've seen a lot of scaremongering but none of that was from lawyers. My observations was most of the negativity came from a combination of the press writing slanted articles criticising the EU (which is fairly typical for anything relating to the EU, it seems) and blogs from people who assumed the worst case and subsequently wrote a hysteria-driven knee-jerk opinion piece as a result. Those blogs, I've found, are the worst examples because they're more likely to spread like a virus where people say "if they're worried then I should be to!" Where as these days people can dismiss the press a little easier if it doesn't confirm their cognitive bias. That's just my opinion from what I've observed though. I'm not trying to claim anything as fact here.
- martin_a 8y ago
  I'm with you on that after a second thought. Our lawyers where rather calm, too, saying that not everything is eaten as hot as its being cooked. "Selfmade media" on the other hand went really wild and fantasized some absurd threats for everybody with a website, you're right on that.

Nasrudith 8y ago

Not quite actually - sensible practice from a security standpoint alone (as opposed to transparency) would be to have a delete but not a download button as it would make exfiltrating data with a compromised account easier. That is the flipside of power to the user - more exploitability. I don't blame them for the goal (right to know is a valid interest for consumers) but we have to acknowledge consequences if we want to avoid future errors. The back up clearing involved would also be a pain in the ass and boost expenses of compliance (can't just use write only storage which nicely solves other problems) but it isn't insurmountable.