6 ms·
It’s just a passive-aggressive hissy fit. The cost of writing the middleware to write out your angsty nonsense is higher than the cost of writing the middleware
by moomin 7y ago
It’s just a passive-aggressive hissy fit. The cost of writing the middleware to write out your angsty nonsense is higher than the cost of writing the middleware to just remove all cookies from every request. The EU detection logic is the same in both cases.
- erik_seaberg 7y agoGDPR has a lot of burdensome requirements, like hiring a commissar and multi-month government review periods before features launches. Do not bet 21M USD that merely deleting cookies and logs will get you anywhere near compliance.
- moomin 7y agoI'm not sure how serving up a custom page to EU addresses solves that problem either, though, so we come back to equivalence.
- erik_seaberg 7y agoThe theory is that Article 3 stops the EU from coming after you (however they might try) if you don't offer goods or services to EU data subjects or monitor their behavior. The GDPR is roughly the size of a novel, and proving you're doing everything it requires is a hell of a lot more work than proving you're out of scope entirely.
- elygre 7y ago> multi-month government review Can you explain this a bit more?
- erik_seaberg 7y agoIt's still extremely vague how many releases will require the eight-week review with six-week extension in https://gdpr-info.eu/art-36-gdpr/ https://gdpr-info.eu/art-36-gdpr/, but this is the kind of friction and cost they're imposing even on groups who aren't doing anything bad.