6 ms·
> unless you're sure you that can afford making these kinds of mistakes, don't provide a service on the internet DOT sounds good
by comboy 7y ago
> unless you're sure you that can afford making these kinds of mistakes, don't provide a service on the internet
DOT
sounds good
- TomVDB 7y agoEverybody makes mistakes. Which makes GDPR a recipe to hand over whatever remains of the Internet to only corporations that afford paying for them.
- comboy 7y agoSure, but there are different kind of mistakes. Surgeon can make a mistake, but it's a different kind of mistake if instead of a surgeon, a plumber cuts the patient with a kitchen knife. I agree it's a difficult problem and it's hard to define boundaries, but some level of competence is welcome when handling data that belongs to other people. If you start some internet service, I expect you not to lose my data (in some lame way, s.h.), just like I expect my car mechanic not to destroy my engine. edit: to give it context, I closed my programming website with thousands of active users that I had for almost 20 years because of GDPR, I'm not a big fan of it, but what I like even less is when complete incompetence when handling personal data results in zero consequences
- ubercow13 7y agoThat's a pretty weak argument in and of itself. Many crimes are mistakes.
- TomVDB 7y agoSimilarly, many simple mistakes shouldn’t be treated as a crime.
- cyphar 7y agoYes, people make mistakes. And by deciding to create a business around other people's personal information some mistakes are bad enough to merit a fine. All sorts of civil offences and crimes can be mistakes. While "it was an accident" might lower the penalty it doesn't negate the fact the mistake was made and people might have been hurt. The idea that we should hold companies that profit off people's personal data blameless if they manage to "make a slip-up" with it is absurd. The only other industry where we accept those kinds of mistakes is Wall Street and we all know how well that policy has gone.
- TomVDB 7y agoI used to have a website that did stuff with GPS data that was uploaded by users. It was purely a hobby affair that was a net loss, but Google ads ($10 per month) reduced the cost somewhat. Those ads probably made it a for profit business. I shut the thing down before GDPR, but if I hadn’t it surely would have been an excellent reason to do so. Those are the kind of websites that you lose. I consider that a loss.
- hdfbdtbcdg 7y agoWhy could GDPR possibly make someone shutdown such a website? Pure FUD. EDIT: Downvotes don't change reality. The OP is spreading FUD. Edit: unless the website was actually abusing users privacy in which case I'm glad it is gone.
- closeparen 7y agoWell, suppose he does some transformation involving position. GPS points also have altitude in them. He neglects to sanitize altitude at the point of collection, and is therefore collecting and retaining more data than necessary to perform the service. He plots positions on a relatively zoomed-out map. Only the first six significant figures make a perceptible difference in the map position, but he retains the same precision that was uploaded, usually higher. Again, failure to minimize. Worse, he enabled automated periodic VM snapshots with his VPS provider, so is not properly complying with deletion requests. Now he has "decided to build a business around profiting from the abuse of personal data" and the consensus in this thread looks on his destruction with glee.
- hdfbdtbcdg 7y ago> Worse, he enabled automated periodic VM snapshots with his VPS provider, so is not properly complying with deletion requests.Worse, he enabled automated periodic VM snapshots with his VPS provider, so is not properly complying with deletion requests. This is typical FUD. GDPR allows backups. Right to be deleted doesn't mean grovelling through backups. If those snapshots are rotated out after e.g. 3 months he is fine. And regarding sanitizing altitude. Again pure FUD. There is no way that that would be a problem. Of course if he stores the data in a personally identifying way and then is either incompetent or abusive then he could attract a fine... In the real world GDPR enables such websites because users can trust that he has to follow some minimum standards.
- Angostura 7y agoIf you make a mistake and you do so honestly, not out of malice and fix it, you are very unlikely to get a fine - you will get guidance and a warning. Unless you are being egregiously slip-shod.
- easytiger 7y agoThat's not true, unfortunately. https://www.lexology.com/library/detail.aspx?g=d8d0c69a-620e-4f26-ab30-f44e270a0d2e https://www.lexology.com/library/detail.aspx?g=d8d0c69a-620e...
- josefx 7y agoStoring user names and passwords in plain text when you have several hundred thousand users is not a "honest mistake" in 2019. In other fields a commercial entity failing basic security practices can be considered criminally negligent.
- llao 7y agoWhat does DOT mean?