3 ms·

> how will this be enforced? Will authorities go and audit the data? How will they know where to look? Etc. “Hey did you delete the data?” “Yes, we deleted it”

> how will this be enforced? Will authorities go and audit the data? How will they know where to look? Etc. “Hey did you delete the data?” “Yes, we deleted it” would, indeed, be laughable. If you're not familiar with Northern European culture, I'm quite sure the companies can expect literal inspectors in their offices expecting clear answers to where the data is and what was done with it. They will be pleasant but firm, focused and unswerving. Infractions and evasions will be carefully noted. These notes will then form the basis of further lawsuits. These people are not fucking around.

dmitryminkovsky 5y ago
How well-versed are they in file systems, database schemas? Will they look at source code? Will they understand it? How will they determine what data came from where?
- tokai 5y ago
  All EU countries have a Data Protection Authority org, so yes the inspectors will have the capabilities to carry out these things. Also this is not criminal law where someone is innocent until proven otherwise. Companies have to prove themselves that they comply with the law. Like food companies have to log cleaning to show they follow the food regulations, as one example.
- rendall 5y ago
  Ah, I see that you expect a US / Southern European style revolving-door wink-and-a-nudge quid pro quo! Yep. Nope. These people will be frighteningly competent
kmlx 5y ago
> If you're not familiar with Northern European culture, I'm quite sure the companies can expect literal inspectors in their offices expecting clear answers to where the data is and what was done with it. zero chance of this ever happening.
- rendall 5y ago
  What happens when, say, a restaurant does not allow inspectors to look at their operations? They get shut down or fined. Same thing. And, no, it's not different because the tech companies are serving up bits and bytes. Same mechanism.
  - kmlx 5y ago
    restaurants provide food. serving bad food gets clients killed. no comparison whatsoever with some websites. what you're writing about has to do with state overreach.
    - rendall 5y ago
      I'm fine with the state as my representative physically shutting down and fining companies that without consent collect data on me and my loved ones. So, no overreach.

dmitryminkovsky 5y ago

How well-versed are they in file systems, database schemas? Will they look at source code? Will they understand it? How will they determine what data came from where?

tokai 5y ago
All EU countries have a Data Protection Authority org, so yes the inspectors will have the capabilities to carry out these things. Also this is not criminal law where someone is innocent until proven otherwise. Companies have to prove themselves that they comply with the law. Like food companies have to log cleaning to show they follow the food regulations, as one example.
rendall 5y ago
Ah, I see that you expect a US / Southern European style revolving-door wink-and-a-nudge quid pro quo! Yep. Nope. These people will be frighteningly competent

kmlx 5y ago

> If you're not familiar with Northern European culture, I'm quite sure the companies can expect literal inspectors in their offices expecting clear answers to where the data is and what was done with it. zero chance of this ever happening.

rendall 5y ago
What happens when, say, a restaurant does not allow inspectors to look at their operations? They get shut down or fined. Same thing. And, no, it's not different because the tech companies are serving up bits and bytes. Same mechanism.
- kmlx 5y ago
  restaurants provide food. serving bad food gets clients killed. no comparison whatsoever with some websites. what you're writing about has to do with state overreach.
  - rendall 5y ago
    I'm fine with the state as my representative physically shutting down and fining companies that without consent collect data on me and my loved ones. So, no overreach.