4 ms·

What I really learned from GDPR and its rollout and its subsequent lack of enforcement is that laws written with regulators being the only ones able to enforce

What I really learned from GDPR and its rollout and its subsequent lack of enforcement is that laws written with regulators being the only ones able to enforce it are just political light shows, they achieve little of value. It is easy for a government to effectively sidestep not implementing the law by defunding the organisation that would do the enforcement or putting a person in charge who doesn't pursue the big breakers. Since individuals can't bring GDPR lawsuits themselves for breaches and fines charged and governments have largely stopped effective enforcement it has become a pointless law. Any company complying now has missed just how little regulators care and are hampering their business for no good reason, it is still open season on customer data. It has the potential to charge in the future, a government change and some adjustments in the commissioner's office in a country could suddenly make the law come into effect but right now it's looking like companies have another half-decade of ignoring this law at least. It could have been useful, in practice it just made websites more annoying to use and those complying fully are exceptionally rare.

M2Ys4U 7y ago
>Since individuals can't bring GDPR lawsuits themselves They absolutely can: Article 79 Right to an effective judicial remedy against a controller or processor 1. Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation. 2. Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.

M2Ys4U 7y ago

>Since individuals can't bring GDPR lawsuits themselves They absolutely can: Article 79 Right to an effective judicial remedy against a controller or processor 1. Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation. 2. Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.