3 ms·

> No business is interested in having to suddenly comply with such regulations Just to pick up on this clause - it really needn't have been sudden. The regulat

> No business is interested in having to suddenly comply with such regulations Just to pick up on this clause - it really needn't have been sudden. The regulation was adopted just over 2 years before enforcement kicked in[0], and of course it was written and debated for a while prior to that. In the UK the ICO researched the implications (for what were then just proposals) back in 2013[1] [0] https://en.wikipedia.org/wiki/General_Data_Protection_Regulation#Timeline https://en.wikipedia.org/wiki/General_Data_Protection_Regula... [1] https://ico.org.uk/media/1042341/implications-european-commissions-proposal-general-data-protection-regulation-for-business.pdf https://ico.org.uk/media/1042341/implications-european-commi... (PDF)

jacquesm 5y ago
And before that we had the DPD, which companies routinely ignored because they would never get fined. That's the only part of the GDPR that made companies take notice: the fact that the GDPR has some pretty impressive teeth. I'm actually quite surprised at the restraint on display so far by regulators, but I'm also quite sure that it is a matter of time before a repeat offender will be shown just how powerful this law is.
- mmarq 5y ago
  Regulators are contacting businesses which they suspect are in breach of GDPR to give them the chance to become compliant (I was in companies that received such communications). If the company is in good faith, they’ll fix whatever the regulator found or explain why haven’t breached the law. These cases don’t get discussed in the media probably because they aren’t published anywhere. Before a company gets a fine, at least for now, it must do some really crazy stuff and/or refuse to cooperate with the regulators.
  - jacquesm 5y ago
    Indeed, I am aware of a few cases like this. But I'm also aware of a couple of companies that have swept breaches under the rug in recent times and if and when those surface they will be in pretty deep trouble.

jacquesm 5y ago

And before that we had the DPD, which companies routinely ignored because they would never get fined. That's the only part of the GDPR that made companies take notice: the fact that the GDPR has some pretty impressive teeth. I'm actually quite surprised at the restraint on display so far by regulators, but I'm also quite sure that it is a matter of time before a repeat offender will be shown just how powerful this law is.

mmarq 5y ago
Regulators are contacting businesses which they suspect are in breach of GDPR to give them the chance to become compliant (I was in companies that received such communications). If the company is in good faith, they’ll fix whatever the regulator found or explain why haven’t breached the law. These cases don’t get discussed in the media probably because they aren’t published anywhere. Before a company gets a fine, at least for now, it must do some really crazy stuff and/or refuse to cooperate with the regulators.
- jacquesm 5y ago
  Indeed, I am aware of a few cases like this. But I'm also aware of a couple of companies that have swept breaches under the rug in recent times and if and when those surface they will be in pretty deep trouble.