4 ms·

Safeguarding trans-Atlantic developer collaboration

42 points by robin_reala 6y ago

gcb0 6y ago
> Prior to the ruling, GitHub had relied on the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks for processing developers’ and customers’ personal data transferred from the EU, the UK, and Switzerland. Upon request, we also provided customers with overlapping protections that means "we sold as much data as we possibly could, and if you were int he US, sucks to be you"
Confiks 6y ago
If you want to know more about the judgement and Standard Contract Clauses, the FAQ page on Schrems' site is a good start: https://noyb.eu/en/next-steps-users-faqs https://noyb.eu/en/next-steps-users-faqs While SCCs are not technically prohibited, any company handing over personal information (be it of customers or employees) in many cases can't in good faith enter in such an agreement. Whether professional usage of Github and other SaaS services can be considered handing over personal information is left as an exercise to and headache of many European legal departments in the coming months.
gcb0 6y ago
> In compliance with the new ruling, GitHub is now relying on SCCs to establish necessary data protection for all That means: "our last industry hack, Privacy Shield Framework, was shot down for the second time, making it dangerous for us. Now we use the even more dubious one, until it is shot down too" more on SCCs gaps: https://www.bclplaw.com/en-US/insights/gdpr-the-most-frequently-asked-questions-are-the-standard.html https://www.bclplaw.com/en-US/insights/gdpr-the-most-frequen...
- aorth 6y ago
  Sounds more like GitHub is just "safeguarding" their own ass. What does "data protection" mean in this context? Protecting user data from the US Government? Strange article...
randompwd 6y ago
So stop allowing US-resident employees access to EU, UK & Swiss data.
deleted 6y ago
[deleted]
mlthoughts2018 6y ago
I feel Europe is hugely winning this fight because they are out-innovating American legislation.
- Proven 6y ago
  That's hilarious!!! Out-innovating in legislation. Dude, there's a word for that, it's called "bureaucracy" The results of said innovation can be seen at https://en.wikipedia.org/wiki/List_of_countries_by_government_spending_as_percentage_of_GDP https://en.wikipedia.org/wiki/List_of_countries_by_governmen... Reverse sort by Government Expenditure of GDP (% of GDP) and find your innovative EU vampire economies clustered near the top.
- google234123 6y ago
  Yes, that's why there are so many unicorns coming out of europe right now.
  - jsiepkes 6y ago
    So unicorns are the most important thing here? Not how we safeguard the privacy of citizens?
- gjvnq 6y ago
  Also, the EU is far more accepting of immigrants than the USA. They will probably be a way better position in the short future if the US continues as doing what it doing.

42 points by robin_reala 6y ago

gcb0 6y ago

> Prior to the ruling, GitHub had relied on the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks for processing developers’ and customers’ personal data transferred from the EU, the UK, and Switzerland. Upon request, we also provided customers with overlapping protections that means "we sold as much data as we possibly could, and if you were int he US, sucks to be you"

Confiks 6y ago

If you want to know more about the judgement and Standard Contract Clauses, the FAQ page on Schrems' site is a good start: https://noyb.eu/en/next-steps-users-faqs https://noyb.eu/en/next-steps-users-faqs While SCCs are not technically prohibited, any company handing over personal information (be it of customers or employees) in many cases can't in good faith enter in such an agreement. Whether professional usage of Github and other SaaS services can be considered handing over personal information is left as an exercise to and headache of many European legal departments in the coming months.

gcb0 6y ago

> In compliance with the new ruling, GitHub is now relying on SCCs to establish necessary data protection for all That means: "our last industry hack, Privacy Shield Framework, was shot down for the second time, making it dangerous for us. Now we use the even more dubious one, until it is shot down too" more on SCCs gaps: https://www.bclplaw.com/en-US/insights/gdpr-the-most-frequently-asked-questions-are-the-standard.html https://www.bclplaw.com/en-US/insights/gdpr-the-most-frequen...

aorth 6y ago
Sounds more like GitHub is just "safeguarding" their own ass. What does "data protection" mean in this context? Protecting user data from the US Government? Strange article...

randompwd 6y ago

So stop allowing US-resident employees access to EU, UK & Swiss data.

deleted 6y ago

[deleted]

mlthoughts2018 6y ago

I feel Europe is hugely winning this fight because they are out-innovating American legislation.

Proven 6y ago
That's hilarious!!! Out-innovating in legislation. Dude, there's a word for that, it's called "bureaucracy" The results of said innovation can be seen at https://en.wikipedia.org/wiki/List_of_countries_by_government_spending_as_percentage_of_GDP https://en.wikipedia.org/wiki/List_of_countries_by_governmen... Reverse sort by Government Expenditure of GDP (% of GDP) and find your innovative EU vampire economies clustered near the top.
google234123 6y ago
Yes, that's why there are so many unicorns coming out of europe right now.
- jsiepkes 6y ago
  So unicorns are the most important thing here? Not how we safeguard the privacy of citizens?
gjvnq 6y ago
Also, the EU is far more accepting of immigrants than the USA. They will probably be a way better position in the short future if the US continues as doing what it doing.