3 ms·

This. Thank you very much for the example! Additionally, let's break out out of the HN bubble and assume the role of somebody who is not a tech aficionado. E.g

by kenty 5y ago

This. Thank you very much for the example! Additionally, let's break out out of the HN bubble and assume the role of somebody who is not a tech aficionado. E.g. the C-level exec of small and medium sized producing company in Germany (e.g. automotive). Now they not only face the burden of having to modernize their often dated tech system but also get the handicap of having a whole new sea of GDPR complexity before them which, if something goes wrong, can be business ending. I've seen this being a preoccupying topic for meetings for years for companies which really should not have to care (producers of automobile parts). It's a significant part of the IT budget going down the drain which could've been spend improving existing processes.

dmitriid 5y ago
> who is not a tech aficionado. E.g. the C-level exec of small and medium sized producing company in Germany (e.g. automotive). Now they not only face the burden Let's start with this question: how are they running their business? > also get the handicap of having a whole new sea of GDPR complexity before them which, if something goes wrong, can be business ending. 1. There's nothing complex about GDPR 2. GDPR is not business ending, as data controllers are expected to help and guid the companies who are found to be in breach of GDPR > I've seen this being a preoccupying topic for meetings for years for companies which really should not have to care It means they don't care in the least. GDPR is an amalgamation of the various data protection laws that existed before GDPR. So, these "poor companies who are in meetings for years" didn't care about data protection then. Then companies were given two years of transition to get in shape and get their act together. Omg, these "poor non-technical companies" are still "in talks for years". GDPR has been in force since May 25 2008. So. At least a decade of data protection laws (and German laws have always been quite strict) + 2 years of transition period + 3.5 years of the law being in effect. And it's still " preoccupying topic for meetings for years"? > It's a significant part of the IT budget going down the drain which could've been spend improving existing processes. Yes, indeed. If 15 years later they still can't figure out why they shouldn't keep personal data around, they definitely need to improve their processes. And IT has nothing to do with it.
- dmitriid 5y ago
  s/since May 2008/since May 2018

by kenty 5y ago

dmitriid 5y ago

> who is not a tech aficionado. E.g. the C-level exec of small and medium sized producing company in Germany (e.g. automotive). Now they not only face the burden Let's start with this question: how are they running their business? > also get the handicap of having a whole new sea of GDPR complexity before them which, if something goes wrong, can be business ending. 1. There's nothing complex about GDPR 2. GDPR is not business ending, as data controllers are expected to help and guid the companies who are found to be in breach of GDPR > I've seen this being a preoccupying topic for meetings for years for companies which really should not have to care It means they don't care in the least. GDPR is an amalgamation of the various data protection laws that existed before GDPR. So, these "poor companies who are in meetings for years" didn't care about data protection then. Then companies were given two years of transition to get in shape and get their act together. Omg, these "poor non-technical companies" are still "in talks for years". GDPR has been in force since May 25 2008. So. At least a decade of data protection laws (and German laws have always been quite strict) + 2 years of transition period + 3.5 years of the law being in effect. And it's still " preoccupying topic for meetings for years"? > It's a significant part of the IT budget going down the drain which could've been spend improving existing processes. Yes, indeed. If 15 years later they still can't figure out why they shouldn't keep personal data around, they definitely need to improve their processes. And IT has nothing to do with it.

dmitriid 5y ago
s/since May 2008/since May 2018