5 ms·
>EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This
by sergiotapia 5y ago
>EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and Microsoft’s online advertising businesses.
Laughable really. How the hell do you reconcile all this data and make the bean counters happy that yes: this is the data we collected through the popups over the years.
- shaky-carrousel 5y agoWell, that's their problem. They must delete the data or face legal consequences. That should act as a deterrent to future "too smart for their own good" ad people.
- sergiotapia 5y agoI agree! I'm just curious how would you do it? Look at when you deployed the popup to production and then delete all data from that timestamp forward? Engineering leaders now have ammo to push back against illegal roadmaps foisted on them.
- tokai 5y agoI guess that if you cant deliminate the unlawful data from the rest, you'll just have to delete all of it.
- deleted 5y ago[deleted]
- DocTomoe 5y agoIf they can not prove that data was not gained by illegal means, the only way would be to delete all data.
- dmitryminkovsky 5y agoThis comment is being downvoted but I’m also wondering: how will this be enforced? Will authorities go and audit the data? How will they know where to look? Etc. “Hey did you delete the data?” “Yes, we deleted it” would, indeed, be laughable. This is not to mention the problem of identifying “the data” which has certainly now been processed ad nauseum. I think the reason companies don’t take these things seriously is because they know they’ll get away with it, one way or another. You can’t expect to enforce any of this if you don’t also legislate the technical specifics of how data must be collected, stored and processed so that its provenance is maintained.
- tokai 5y agoHow is anything enforced? I don't see this as much different from anything else that companies have to apply with. You can never reach 100% certainty that anyone complies with the law. Be it GDPR, work environment law, product health req, etc. You do inspections. You demand proves of compliance, and when said proves are deemed inadequate you sanction them until something adequate is provided. Like everything else with law its fuzzy and ongoing.
- amelius 5y agoYou can enforce it by feeding a system with data, then checking if the data is in the system (e.g. by trying to buy the data, or pretending to be an advertiser).
- rendall 5y ago> how will this be enforced? Will authorities go and audit the data? How will they know where to look? Etc. “Hey did you delete the data?” “Yes, we deleted it” would, indeed, be laughable. If you're not familiar with Northern European culture, I'm quite sure the companies can expect literal inspectors in their offices expecting clear answers to where the data is and what was done with it. They will be pleasant but firm, focused and unswerving. Infractions and evasions will be carefully noted. These notes will then form the basis of further lawsuits. These people are not fucking around.
- dmitryminkovsky 5y agoHow well-versed are they in file systems, database schemas? Will they look at source code? Will they understand it? How will they determine what data came from where?
- tokai 5y agoAll EU countries have a Data Protection Authority org, so yes the inspectors will have the capabilities to carry out these things. Also this is not criminal law where someone is innocent until proven otherwise. Companies have to prove themselves that they comply with the law. Like food companies have to log cleaning to show they follow the food regulations, as one example.
- YXNjaGVyZWdlbgo 5y agoWhen GDPR was introduced we flagged every datapoint with their point of origin I believe big tech did the same.
- deleted 5y ago[deleted]