3 ms·

An employee comment in the relevant merge request indicates that they are already knowing non-compliant with the GDPR. While I applaud their openness I wonder i

by tssva 7y ago

An employee comment in the relevant merge request indicates that they are already knowing non-compliant with the GDPR. While I applaud their openness I wonder if this will comeback to bite them.

Omin 7y ago
Do you have a link (or screenshot) of that comment?
- tofof 7y ago
  "This is because we suspect that we are not currently in compliance but cannot expressly call out the gaps until the DPIAs are complete. (Actually, by not having the DPIAs, we are, on our face, out of compliance with GDPR regulations.)" https://gitlab.com/gitlab-org/gitlab/merge_requests/14182#note_204187905 https://gitlab.com/gitlab-org/gitlab/merge_requests/14182#no... The author, @cciresi is Candice Ciresi, their Director of Global Risk and Compliance. https://i.imgur.com/52DUErO.png https://i.imgur.com/52DUErO.png