10 ms·

As more and more states create their own legislation in this space, I've got a great startup pitch: Taxjar, but for each municipality's data laws - caters your

As more and more states create their own legislation in this space, I've got a great startup pitch: Taxjar, but for each municipality's data laws - caters your Privacy Policy based on visitor IP (with requisite geolocation disclaimer before one is allowed to view the Privacy Policy, of course). There's no innovation quite like compliance-driven innovation! C'mon gang, let's get coding.

hosh 5y ago
I think that is one of the value proposition of fly.io -- by bringing compute to the edge, you can comply with local data privacy policies, along with some interesting ways of building web apps, and get great data locality and low latency.
theandrewbailey 5y ago
Instead, let's disrupt the industry with storageless personal data. It's like serverless, but for PII.
- keneda7 5y ago
  So are you purposing each person's data is not stored anywhere and must be manually typed? Or something where each person controls where their data is stored and has to explicitly give access to sites in order to read the data? I feel like the second option would be feasible if you could somehow get the major sites to agree they would pull the data each request rather than storing it in their databases.
- teeray 5y ago
  “User data is stored securely using our innovative write-only memory”
  - tomschlick 5y ago
    "By storing our blockchain on /dev/null, we have limitless scalability to handle your customer's data, without the need to worry about it being stolen by hackers"
- smolder 5y ago
  I feel silly asking, but you're joking right? On it's face it's nonsensical, but then "serverless" is kind of nonsense, too, given that it still runs on servers, so IDK. You did remind me of Tim Berners-Lee's SOLID project, not that it's "storageless" really.
lmkg 5y ago
That's already a feature of enterprise-level consent management platforms like OneTrust and TrustArc. Well, a milder version anyways. Look-up is only country level, not state, and what changes is generally the pop-up rather than the privacy policy. But the tools are already in the marketplace.
- ta1234567890 5y ago
  Great, that means there is a potential market for it. When Ford motors started cars already existed, when Facebook started social networks already existed, when Google started search engines already existed, etc. In my opinion, getting demotivated for not being the first or being “the one” that came up with the idea prevents way too many people from starting their own thing. In the end, execution and adoption are what really matters. In general is better to copy something and improve on it than trying to invent something completely new.
  - lmkg 5y ago
    I know y'all are taking the piss. But real talk though: The consent-management space could do with some disruption. Like, for example, just a thought here, I know this sounds crazy, but hear me out: actually complying with GDPR. You'd think a tool whose entire job is to ensure compliance when gathering consent would actually gather consent in a compliant manner, but that's not the default behavior.
    - l33t2328 5y ago
      Can you elaborate on the GDPR tool?
      - rrix2 5y ago
        I take it to mean that this person is complaining (a point I often agree with) that these consent management platforms often resort to dark patterns to drive users' consent rather than attempting to truly inform a user before they consent.
908B64B197 5y ago
Country level IP mapping was already a mistake. Let's not make it even more granular.
- shadilay 5y ago
  It's time for a social media special district. https://en.wikipedia.org/wiki/Special_district_(United_States) https://en.wikipedia.org/wiki/Special_district_(United_State...
a1369209993 5y ago
> caters your Privacy Policy based on visitor IP And this is why it's important for such legislation to apply to all citizens and permanent residents of the legislating juridiction, regardless of where they're physically or network-topologically located.
- deleted 5y ago
  [deleted]
- dragonwriter 5y ago
  > And this is why it’s important for such legislation to apply to all citizens and permanent residents of the legislating juridiction, regardless of where they’re physically or network-topologically located. With Westphalian sovereigns (or gangs of such working together, like the EU), that’s possible in principle, because such entities can claim jurisdiction over anything anywhere; their sovereignty is unlimited, though their practical ability to enforce their laws may be more circumscribed. For US states, however – “sovereign” though they may be – they cannot assert jurisdiction over commerce just because one of their citizens is involved, regardless of where they are physically located and where the other party is.
  - Jon_Lowtek 5y ago
    The EU has the protection of personal data as article 8 of the Charter of Fundamental Rights of The European Unions. It starts with the wonderful words "Everyone has the right ..."
oh_sigh 5y ago
Are you ready to accept liability for faulty/non-lawful compliance?
akudha 5y ago
I remember talking to a couple of tiny house builders few years ago. Rules for tiny houses vary wildly depending on the state and the county. There is no central place where the builders can look up the rules (at least that was case few years ago). In many cases they have to call the county office or go in person to get the latest rules, it is a hassle. They were willing to pay a few hundred dollars every month just to be able to access up-to-date rules in one place. I wonder how many of these compliance driven innovation opportunities (great term, btw) there are, thanks to bureaucracy.
- toomuchtodo 5y ago
  https://up.codes/ https://up.codes/ Carl Malamud, an open access advocate (among other roles), has been championing the cause of open building codes for almost a decade. https://www.google.com/search?q=Carl+Malamud+open+access https://www.google.com/search?q=Carl+Malamud+open+access https://www.eff.org/cases/publicresource-freeingthelaw https://www.eff.org/cases/publicresource-freeingthelaw
- mywittyname 5y ago
  >I wonder how many of these compliance driven innovation opportunities (great term, btw) there are, thanks to bureaucracy. Tons. I'd venture to say that the majority of B2B companies out there exist because they offer some form of assistance in dealing with compliance across the country/world. Even though we probably don't think of that as their primary service. Example: payroll services - the money transfers are the easy part, a company is really paying these services to do tax compliance. One of the problems with starting a company like this is finding all of the niches that exist. You kind of have to have worked in a sector to learn what some of the pain points are that can be eliviated.
  - akudha 5y ago
    Maybe we could make a list. Tax filing, tiny house codes, building codes, customs fee at the borders… What else?
    - 5y ago
1vuio0pswjnm7 5y ago
Done. It's a few lines in a proxy configuration file. Is this really "innovation".
MereInterest 5y ago
Privacy regulations that can be satisfied by merely changing the text on a privacy policy that nobody is actually expected to read are not useful privacy regulations. Useful privacy regulations must be sufficient to force changes in how a business is run. If a company is stalking me across every major webpage, then adding implied consent to a privacy policy on that company's webpage does nothing to restore my privacy. I think the GDPR comes closest to what I would want, with the requirement for explicit, informed, and freely given consent prior to any data collection that isn't strictly necessary for the site to function, and that access to the site can't be conditional on giving consent. What I'd want in addition is far stricter enforcement of it, such as heavy fines on every site that thinks a banner saying "Continued use of this site constitutes consent." is satisfies any of the conditions required.
Terretta 5y ago
Or, allow every visitor to retain maximal privacy.

hosh 5y ago

I think that is one of the value proposition of fly.io -- by bringing compute to the edge, you can comply with local data privacy policies, along with some interesting ways of building web apps, and get great data locality and low latency.

theandrewbailey 5y ago

Instead, let's disrupt the industry with storageless personal data. It's like serverless, but for PII.

keneda7 5y ago
So are you purposing each person's data is not stored anywhere and must be manually typed? Or something where each person controls where their data is stored and has to explicitly give access to sites in order to read the data? I feel like the second option would be feasible if you could somehow get the major sites to agree they would pull the data each request rather than storing it in their databases.
teeray 5y ago
“User data is stored securely using our innovative write-only memory”
- tomschlick 5y ago
  "By storing our blockchain on /dev/null, we have limitless scalability to handle your customer's data, without the need to worry about it being stolen by hackers"
smolder 5y ago
I feel silly asking, but you're joking right? On it's face it's nonsensical, but then "serverless" is kind of nonsense, too, given that it still runs on servers, so IDK. You did remind me of Tim Berners-Lee's SOLID project, not that it's "storageless" really.

lmkg 5y ago

That's already a feature of enterprise-level consent management platforms like OneTrust and TrustArc. Well, a milder version anyways. Look-up is only country level, not state, and what changes is generally the pop-up rather than the privacy policy. But the tools are already in the marketplace.

ta1234567890 5y ago
Great, that means there is a potential market for it. When Ford motors started cars already existed, when Facebook started social networks already existed, when Google started search engines already existed, etc. In my opinion, getting demotivated for not being the first or being “the one” that came up with the idea prevents way too many people from starting their own thing. In the end, execution and adoption are what really matters. In general is better to copy something and improve on it than trying to invent something completely new.
- lmkg 5y ago
  I know y'all are taking the piss. But real talk though: The consent-management space could do with some disruption. Like, for example, just a thought here, I know this sounds crazy, but hear me out: actually complying with GDPR. You'd think a tool whose entire job is to ensure compliance when gathering consent would actually gather consent in a compliant manner, but that's not the default behavior.
  - l33t2328 5y ago
    Can you elaborate on the GDPR tool?
    - rrix2 5y ago
      I take it to mean that this person is complaining (a point I often agree with) that these consent management platforms often resort to dark patterns to drive users' consent rather than attempting to truly inform a user before they consent.

908B64B197 5y ago

Country level IP mapping was already a mistake. Let's not make it even more granular.

shadilay 5y ago
It's time for a social media special district. https://en.wikipedia.org/wiki/Special_district_(United_States) https://en.wikipedia.org/wiki/Special_district_(United_State...

a1369209993 5y ago

> caters your Privacy Policy based on visitor IP And this is why it's important for such legislation to apply to all citizens and permanent residents of the legislating juridiction, regardless of where they're physically or network-topologically located.

deleted 5y ago
[deleted]
dragonwriter 5y ago
> And this is why it’s important for such legislation to apply to all citizens and permanent residents of the legislating juridiction, regardless of where they’re physically or network-topologically located. With Westphalian sovereigns (or gangs of such working together, like the EU), that’s possible in principle, because such entities can claim jurisdiction over anything anywhere; their sovereignty is unlimited, though their practical ability to enforce their laws may be more circumscribed. For US states, however – “sovereign” though they may be – they cannot assert jurisdiction over commerce just because one of their citizens is involved, regardless of where they are physically located and where the other party is.
- Jon_Lowtek 5y ago
  The EU has the protection of personal data as article 8 of the Charter of Fundamental Rights of The European Unions. It starts with the wonderful words "Everyone has the right ..."

oh_sigh 5y ago

Are you ready to accept liability for faulty/non-lawful compliance?

akudha 5y ago

I remember talking to a couple of tiny house builders few years ago. Rules for tiny houses vary wildly depending on the state and the county. There is no central place where the builders can look up the rules (at least that was case few years ago). In many cases they have to call the county office or go in person to get the latest rules, it is a hassle. They were willing to pay a few hundred dollars every month just to be able to access up-to-date rules in one place. I wonder how many of these compliance driven innovation opportunities (great term, btw) there are, thanks to bureaucracy.

toomuchtodo 5y ago
https://up.codes/ https://up.codes/ Carl Malamud, an open access advocate (among other roles), has been championing the cause of open building codes for almost a decade. https://www.google.com/search?q=Carl+Malamud+open+access https://www.google.com/search?q=Carl+Malamud+open+access https://www.eff.org/cases/publicresource-freeingthelaw https://www.eff.org/cases/publicresource-freeingthelaw
mywittyname 5y ago
>I wonder how many of these compliance driven innovation opportunities (great term, btw) there are, thanks to bureaucracy. Tons. I'd venture to say that the majority of B2B companies out there exist because they offer some form of assistance in dealing with compliance across the country/world. Even though we probably don't think of that as their primary service. Example: payroll services - the money transfers are the easy part, a company is really paying these services to do tax compliance. One of the problems with starting a company like this is finding all of the niches that exist. You kind of have to have worked in a sector to learn what some of the pain points are that can be eliviated.
- akudha 5y ago
  Maybe we could make a list. Tax filing, tiny house codes, building codes, customs fee at the borders… What else?
  - 5y ago

1vuio0pswjnm7 5y ago

Done. It's a few lines in a proxy configuration file. Is this really "innovation".

MereInterest 5y ago

Privacy regulations that can be satisfied by merely changing the text on a privacy policy that nobody is actually expected to read are not useful privacy regulations. Useful privacy regulations must be sufficient to force changes in how a business is run. If a company is stalking me across every major webpage, then adding implied consent to a privacy policy on that company's webpage does nothing to restore my privacy. I think the GDPR comes closest to what I would want, with the requirement for explicit, informed, and freely given consent prior to any data collection that isn't strictly necessary for the site to function, and that access to the site can't be conditional on giving consent. What I'd want in addition is far stricter enforcement of it, such as heavy fines on every site that thinks a banner saying "Continued use of this site constitutes consent." is satisfies any of the conditions required.

Terretta 5y ago

Or, allow every visitor to retain maximal privacy.