3 ms·

> and you still need to consult with an attorney specializing in privacy. Governments should be refunding solicitor costs to anyone needing GDPR advice. Otherw

> and you still need to consult with an attorney specializing in privacy. Governments should be refunding solicitor costs to anyone needing GDPR advice. Otherwise this is just another way to add barriers. If you are on modest income you can forget about setting up a website in the EU.

jdlshore 6y ago
The law is quite readable, and the various Data Protection Agencies (country-specific regulators) have provided more concrete guidance. If you're setting up a website that takes a restrained approach to personal data, you don't necessarily need an attorney.
- stremovsky 6y ago
  Databunker turns basically any startup to be privacy by design compliant.
  - jeffffff 6y ago
    how does it address ip addresses in server logs?
    - stremovsky 6y ago
      Take a look at this article: https://www.freecodecamp.org/news/how-to-stay-gdpr-compliant-with-access-logs/ https://www.freecodecamp.org/news/how-to-stay-gdpr-compliant...
remus 6y ago
> Otherwise this is just another way to add barriers. Personally I think pretty much everything in GDPR is just sensible guidelines for how to handle personal data, and if you're not willing to do those things then you probably shouldn't be handling personal data in the first place. Being ignorant of good data practice is not an excuse. > If you are on modest income you can forget about setting up a website in the EU. This is just rubbish. GDPR only applies to personal info for a start so if you don't store personal info then you have nothing to worry about. Even if you do store personal info the vast majority of use cases are really straightforward and require a very minimal understanding of the law to be compliant.
- Rule35 6y ago
  > GDPR is just sensible guidelines for how to handle personal data And yet it doesn't say "don't give it to me if you don't want me to have it." > GDPR only applies to personal info for a start so if you don't store personal info then you have nothing to worry about. So logging IPs is fine?
  - michaelmior 6y ago
    IP addresses are (probably) considered personal data under the GDPR. https://www.fieldfisher.com/en/services/privacy-security-and-information/privacy-security-and-information-law-blog/can-a-dynamic-ip-address-constitute-personal-data https://www.fieldfisher.com/en/services/privacy-security-and...
- reitanqild 6y ago
  Furthermore you can often ask them for help (or so I have heard).

jdlshore 6y ago

The law is quite readable, and the various Data Protection Agencies (country-specific regulators) have provided more concrete guidance. If you're setting up a website that takes a restrained approach to personal data, you don't necessarily need an attorney.

stremovsky 6y ago
Databunker turns basically any startup to be privacy by design compliant.
- jeffffff 6y ago
  how does it address ip addresses in server logs?
  - stremovsky 6y ago
    Take a look at this article: https://www.freecodecamp.org/news/how-to-stay-gdpr-compliant-with-access-logs/ https://www.freecodecamp.org/news/how-to-stay-gdpr-compliant...

remus 6y ago

> Otherwise this is just another way to add barriers. Personally I think pretty much everything in GDPR is just sensible guidelines for how to handle personal data, and if you're not willing to do those things then you probably shouldn't be handling personal data in the first place. Being ignorant of good data practice is not an excuse. > If you are on modest income you can forget about setting up a website in the EU. This is just rubbish. GDPR only applies to personal info for a start so if you don't store personal info then you have nothing to worry about. Even if you do store personal info the vast majority of use cases are really straightforward and require a very minimal understanding of the law to be compliant.

Rule35 6y ago
> GDPR is just sensible guidelines for how to handle personal data And yet it doesn't say "don't give it to me if you don't want me to have it." > GDPR only applies to personal info for a start so if you don't store personal info then you have nothing to worry about. So logging IPs is fine?
- michaelmior 6y ago
  IP addresses are (probably) considered personal data under the GDPR. https://www.fieldfisher.com/en/services/privacy-security-and-information/privacy-security-and-information-law-blog/can-a-dynamic-ip-address-constitute-personal-data https://www.fieldfisher.com/en/services/privacy-security-and...
reitanqild 6y ago
Furthermore you can often ask them for help (or so I have heard).