2 ms·
>Aren't they legally required to under GDPR? Yeah, if they get caught. Which they don't have to be.
by iidzy 7y ago
>Aren't they legally required to under GDPR?
Yeah, if they get caught. Which they don't have to be.
- ceejayoz 7y agoA fine of 2-4% of global revenue seems like an insanely high risk to take here.
- wglb 7y agoIt is more like if they don't respond, repeatedly. Also, it isn't clear if there is PD (Personal Data) there--just a password would not be enough to identify a person. If it were in combination to user ID or email, it would be.