6 ms·

GDPR has been a massive win for user/consumer rights. Its a piece of legislation law makers in the US are trying to mimic. Surprisingly the UK are trying to ri

GDPR has been a massive win for user/consumer rights. Its a piece of legislation law makers in the US are trying to mimic. Surprisingly the UK are trying to rid or weaken GDPR significantly after brexit. The only way to fix this problem now is through strong legislation.

wjnc 5y ago
Do we really need more or new legislation if there is still ample room for improvement on the enforcement side of GDPR. Just a not so far stretch: all or most of the GDPR supervisors now think Google Analytics is a no-go. Publish this and an intention to fine say 2% of revenue, set an expiration date six months ahead and do a EU-tender for a scraping facility finding all users of Google Analytics. Then in six months, re-scrape and send out the fines. Rinse and repeat. Google Tag Manager could be declared illegal on the outset, with a 5 to 10% fine for Google if they continue to offer it in the EU. Do a top-down assessment of the usage of Google Tag Manager in the largest e-commerce users in Europe. Fine them as well. At the end of the day privacy enforcement could easily pay for itself. (Edit: After typing this I think you were writing from a US perspective. I think GDPR is a big win as well, but enforcement is feeble ;)
mlatu 5y ago
US law makers are trying to mimic GDPR? are you certain? would be certainly nice, but i dont believe there is a majority in the US that would support such a change. I mean there are probably more individual people interested in doing that than not, but I bet in comparison there are more individual $$$ being invested in keeping data privacy laws as lax as possible
kkjjkgjjgg 5y ago
Did it really make the world a better place? Most sites collect as much data as ever, but now we need many more clicks, and can't have nice things like photos from kindergarden parties anymore.
- GreenWatermelon 5y ago
  I'm less likely to use a site that offers obnoxious cookie consent forms, and I think I'm better off without them. so yeah, it made the world better for me. My anger is directed towards the criminal websites that seek to circumvent the spirit of the law (most if the web today)
  - shadowgovt 5y ago
    To my observation, there are no sites with more than a dram of content on them that haven't been compelled by GDPR compliance to put an obnoxious cookie banner up. If you've found some, please share.
    - denton-scratch 5y ago
      If you need to set a cookie for the correct operation of your site, then you don't need a cookie banner. The banners are a middle-finger to the GDPR.
      - shadowgovt 5y ago
        ... but "correct operation of your site" is in the eye of a judge and can't be evaluated before someone brings suit, so "better safe than sorry" behavior (at the cost of user time) is completely predictable. ... It's not even clear that it's safe to log IP addresses in the style of a default Apache configuration on a static website without user consent.
        denton-scratch 5y ago
        > completely predictable It's completely predictable that there are people who don't want to comply. Collecting personal information is a lucrative business. Re. Website logs: in fact it's perfectly clear that a website log retained for the purposes of site management is fine. It's on the face of the regulation.
kristofferR 5y ago
> Surprisingly the UK are trying to rid or weaken GDPR significantly after brexit. Isn't that the whole point of brexit - to get rid of various EU customer protection laws and regulations?

wjnc 5y ago

Do we really need more or new legislation if there is still ample room for improvement on the enforcement side of GDPR. Just a not so far stretch: all or most of the GDPR supervisors now think Google Analytics is a no-go. Publish this and an intention to fine say 2% of revenue, set an expiration date six months ahead and do a EU-tender for a scraping facility finding all users of Google Analytics. Then in six months, re-scrape and send out the fines. Rinse and repeat. Google Tag Manager could be declared illegal on the outset, with a 5 to 10% fine for Google if they continue to offer it in the EU. Do a top-down assessment of the usage of Google Tag Manager in the largest e-commerce users in Europe. Fine them as well. At the end of the day privacy enforcement could easily pay for itself. (Edit: After typing this I think you were writing from a US perspective. I think GDPR is a big win as well, but enforcement is feeble ;)

mlatu 5y ago

US law makers are trying to mimic GDPR? are you certain? would be certainly nice, but i dont believe there is a majority in the US that would support such a change. I mean there are probably more individual people interested in doing that than not, but I bet in comparison there are more individual $$$ being invested in keeping data privacy laws as lax as possible

kkjjkgjjgg 5y ago

Did it really make the world a better place? Most sites collect as much data as ever, but now we need many more clicks, and can't have nice things like photos from kindergarden parties anymore.

GreenWatermelon 5y ago
I'm less likely to use a site that offers obnoxious cookie consent forms, and I think I'm better off without them. so yeah, it made the world better for me. My anger is directed towards the criminal websites that seek to circumvent the spirit of the law (most if the web today)
- shadowgovt 5y ago
  To my observation, there are no sites with more than a dram of content on them that haven't been compelled by GDPR compliance to put an obnoxious cookie banner up. If you've found some, please share.
  - denton-scratch 5y ago
    If you need to set a cookie for the correct operation of your site, then you don't need a cookie banner. The banners are a middle-finger to the GDPR.
    - shadowgovt 5y ago
      ... but "correct operation of your site" is in the eye of a judge and can't be evaluated before someone brings suit, so "better safe than sorry" behavior (at the cost of user time) is completely predictable. ... It's not even clear that it's safe to log IP addresses in the style of a default Apache configuration on a static website without user consent.
      - denton-scratch 5y ago
        > completely predictable It's completely predictable that there are people who don't want to comply. Collecting personal information is a lucrative business. Re. Website logs: in fact it's perfectly clear that a website log retained for the purposes of site management is fine. It's on the face of the regulation.

kristofferR 5y ago

> Surprisingly the UK are trying to rid or weaken GDPR significantly after brexit. Isn't that the whole point of brexit - to get rid of various EU customer protection laws and regulations?