4 ms·

Making it abundantly clear why the US needs to pass a GDPR clone into law.

• alxlaz 7y ago
  I'm a big fan of the GDPR and it certainly improved things over here across the pond, but "pass a GDPR clone" isn't something that leads to progress. There's a lot of stuff that can be improved about the GDPR, and there are a lot of other options as well -- for example, in this case, the US could choose to extend the coverage of HIPAA regulations (or a subset of them) to commercial entities selling health-related services, not just medical providers. This would also have the advantage of requiring less legal effort and it would avoid introducing an entirely new framework. The GDPR is a very broad axe, for an organization that isn't a federation and doesn't have a real federal government, the way the US does. The US has legal options and a legal framework that we don't have.
  • krageon 7y ago
    If the US truly has that legal framework (or the options), then it has consistently shown reluctant to enforce those. A big, scary axe is the solution they need (as well as potentially a proper education campaign for it's citizens, so everyone is aware that they have rights and they need to stop thinking companies can take that away if that's convenient for them).
• blaser-waffle 7y ago
  CCPA is already a thing in California and is, nearest I can tell, actually stricter than GDPR. Not a national law -- far from it -- but a first step.