5 ms·

1. Re advertising agencies, they haven't? 2. What the hell are you doing as a tech person that means GDPR is causing you serious issues?

EdwardDiego 6y ago
Well, from my POV, the biggest GDPR technical issue is integrating with Google. They don't support TCF 2.0[1] like nearly everyone else in Europe, so we have to special case them. Other than that, we've had to a) ensure we honour user consent b) ensure that only directly relevant PII is held in our systems c) for only as long as needed and d) is handled securely - so ensure encryption at rest and in transit is properly applied. Was maybe about 2 months work for 3 people to put in place, and we had plenty of time to do so. Oh, and an initial early change we made at the behest of our lawyers was to drop the last quartet of any stored IPs. Not sure if that was GDPR or another EU directive though. [1]: https://iabeurope.eu/tcf-2-0/ https://iabeurope.eu/tcf-2-0/
- RobertKerans 6y ago
  Was three months of review work for us at the time, one person doing most of the work with support from three others for implementation. Bar Google, which is understandable, I'm not sure I understand why you would have an issue with the other stuff
  - EdwardDiego 6y ago
    Integrations across multiple parties take time :) TCF 2.0 required coordination with and supporting publishers and DSPs.
matthewmacleod 6y ago
I was quoting the parent - entirely agree and it’s an obviously facetious point. Frankly the amount of misinformation circulating about GDPR of in particular from US techbros is astonishing. Nobody should be having a serious issue complying.
- RobertKerans 6y ago
  Ah, apologies! Yeah, I find it absolutely nuts. Anecdotal, but the only serious hatred of GDPR I've heard from UK side was from those in high-level management at data broker/data broker-associated firms. Which kiiiinda chimes with why people like Cummings want relaxation of the regulations, given those people float in the same circles & have the ear of the current government. Makes me stupendously uneasy given that the only thing they care about is cash.

EdwardDiego 6y ago

Well, from my POV, the biggest GDPR technical issue is integrating with Google. They don't support TCF 2.0[1] like nearly everyone else in Europe, so we have to special case them. Other than that, we've had to a) ensure we honour user consent b) ensure that only directly relevant PII is held in our systems c) for only as long as needed and d) is handled securely - so ensure encryption at rest and in transit is properly applied. Was maybe about 2 months work for 3 people to put in place, and we had plenty of time to do so. Oh, and an initial early change we made at the behest of our lawyers was to drop the last quartet of any stored IPs. Not sure if that was GDPR or another EU directive though. [1]: https://iabeurope.eu/tcf-2-0/ https://iabeurope.eu/tcf-2-0/

RobertKerans 6y ago
Was three months of review work for us at the time, one person doing most of the work with support from three others for implementation. Bar Google, which is understandable, I'm not sure I understand why you would have an issue with the other stuff
- EdwardDiego 6y ago
  Integrations across multiple parties take time :) TCF 2.0 required coordination with and supporting publishers and DSPs.

matthewmacleod 6y ago

I was quoting the parent - entirely agree and it’s an obviously facetious point. Frankly the amount of misinformation circulating about GDPR of in particular from US techbros is astonishing. Nobody should be having a serious issue complying.

RobertKerans 6y ago
Ah, apologies! Yeah, I find it absolutely nuts. Anecdotal, but the only serious hatred of GDPR I've heard from UK side was from those in high-level management at data broker/data broker-associated firms. Which kiiiinda chimes with why people like Cummings want relaxation of the regulations, given those people float in the same circles & have the ear of the current government. Makes me stupendously uneasy given that the only thing they care about is cash.