3 ms·

I'd be interested to hear peoples' experiences with complying with GPDR & expense. Ben is kind of a libertarian, and he takes it as an article of the libertaria

I'd be interested to hear peoples' experiences with complying with GPDR & expense. Ben is kind of a libertarian, and he takes it as an article of the libertarian faith that regulation simply entrenches incumbents/big companies by making it too expensive for new or smaller companies to break into a market. (He has made this point many, many times on Stratechery). Already in the private Stratechery forums, there's one person who said that he lead GPDR compliance for a startup and it wasn't expensive at all. What are other peoples' experiences with GPDR & cost?

bronson 6y ago
I did GDPR/CCPA consulting for a few retailers. If you have a good handle on the data you're storing (good data governance), compliance tends to be pretty easy. Even if you're being fast&loose with some of your customer data, the fix is usually to quit storing that data. We saw very few customers asking for their data to be deleted (they WANT to be your customer) so delete requests were a very part-time endeavor. If you don't have a good idea of the data you're storing (sadly, very common), or if you're abusing your customers, then it can take years of consultant-hours to unwind the idiocy. But that's not really the GDPR's fault. You would have needed to do this anyway. You'd be amazed at the kind of sensitive cruft that can pile up in SAP if you're not paying attention. It's good to give your systems a good scrubbing once in a while.