5 ms·
This is another example of why the US urgently needs legislation along the lines of GDPR. I know California’s law took effect on Jan 1. Does anyone know offhan
by sickcodebruh 7y ago
This is another example of why the US urgently needs legislation along the lines of GDPR. I know California’s law took effect on Jan 1.
Does anyone know offhand what the penalty would be if this had been a Californian or EU company?
- Nextgrid 7y agoThe problem is that the site didn't collect the data because they wanted to, they did it because the law requires it. GDPR (and presumably equivalent privacy regulations) explicitly has an exemption for data you are legally required to keep. Regarding fines, they wouldn't undo the damage of the leak either. I don't think this kind of leak can be mitigated with any amount of money, short of giving all the people involved a new identity and forcing them to start a new life somewhere else (and even then, they can still be recognised by their physical appearance).
- bobbydroptables 7y agoI don't follow the distinction you're making about GDPR. I don't think anyone is saying they shouldn't have this information, just that they should make at least some minor modicum of effort to secure it. GDPR doesn't say you don't need to properly secure data even if you're legally required to collect it. GDPR solves this problem as much as any legislation can.
- dependenttypes 7y agoGDPR has a few useful clauses for this case, such as making it mandatory to inform the people whose data was leaked of the leak.
- watwut 7y agoGDPR also requires safe storage.