3 ms·

For companies as large as Facebook, it must be economical to "bet" a relatively small sum of money on the long shot that they win the case.

• matsemann 6y ago
  That's what the GDPR tries to solve by not having a fixed amount for the fines, but allowing them to go upwards of 2% of revenue.
  • Nextgrid 6y ago
    And this has yet to be enforced despite thousands of companies openly breaching it in bad faith.
    • ben_w 6y ago
      I remember many people on Hacker News being appalled that it could go as high as 2% of global revenue, and that others here pointed out that 2% global revenue was merely the maximum, and that most fines — especially the initial ones or for relatively minor breaches — would be much lower.
    • bmn__ 6y ago
      > this has yet to be enforced You are misinformed. https://www.enforcementtracker.com/ https://www.enforcementtracker.com/
      • Nextgrid 6y ago
        That link gets posted all the time and yet the web is still littered with non-compliant consent flows, so whatever fines there are, they aren’t enough.
  • tyfon 6y ago
    For severe breaches the maximum is actually €20 million or 4% of global revenue [1] whichever is higher. For smaller breaches it is 2%. [1] https://gdpr-info.eu/issues/fines-penalties/ https://gdpr-info.eu/issues/fines-penalties/
  • reaperducer 6y ago
    allowing them to go upwards of 2% of revenue. When it's a minimum of 25% of revenue, the companies will take notice. Until then, it's just factored in like pencils and laptops and coffee: just another cost of doing business.
    • deleted 6y ago
      [deleted]