3 ms·
Do you think it's possible that any potential liability could already have been exposed when the issue itself ( https://gitlab.com/gitlab-com/www-gitlab-com/iss
by jka 7y ago
Do you think it's possible that any potential liability could already have been exposed when the issue itself ( https://gitlab.com/gitlab-com/www-gitlab-com/issues/5555 https://gitlab.com/gitlab-com/www-gitlab-com/issues/5555 ) was opened, prior to compliance becoming aware of it? It contains the statement:
"In e-group on Monday October 15, 2019 we took the decision to enable a "job family country-of-residence block" for team members who have access to customer data. This is at the expressed concern of several enterprise customers, and also what is becoming a common practice in our industry in the current geopolitical climate."
It could be that better legal scrutiny during contract negotiation might have prevented this becoming an engineering, hiring and compliance concern.
- angry_octet 7y agoYour liability would be larger if you were known to have ignored qualified legal advice that it was risky. Generally you don't read advice that says 'I believe doing X is illegal' because it doesn't get to that point. I can't help but think there are other, quieter, lawyers involved.