4 ms·

Yeah, this is probably the most pragmatic answer. It's a pain to implement and only adds more complexity to my setup for a tiny percentage of customers; but on

by oliv__ 5y ago

Yeah, this is probably the most pragmatic answer. It's a pain to implement and only adds more complexity to my setup for a tiny percentage of customers; but on the other hand the more I dig into the answers, the more unclear things get with recent rulings overturning common practices. It's unfortunate that finding the answer to such a simple question seems to require lawyers, especially for a small business like mine. I wish we could protect data and privacy without opening Pandora's box.

jollybean 5y ago
Spending a lot of money on something you don't need to do is not 'pragamatic'. "It's unfortunate that finding the answer to such a simple question seems to require lawyers, " Yes, and it's the a problem for the EU. While there is definitely a need to have some kind of regulatory elements in place, the degree of complexity involved creates considerable constraints and overhead for ultimately very little gain. There is probably a version of this legislation, or even better, some kind of 'data treaty' between WTO or OECD nations that makes this work out with a lot less overhead.
- oliv__ 5y ago
  Whether I "need" it or not depends on how much of my future customer base I estimate will be EU-based. Believe me, I don't think these laws are very well structured (they're not even clear enough that you have to dig through 15 different sources and recent court rulings to figure out what to do) and I don't want to add complexity to my setup, but I am trying to grow my business: if it works out financially with enough new EU customers, then the headache could be worth it.
  - jollybean 5y ago
    "I don't think these laws are very well structured (they're not even clear enough that you have to dig through 15 different sources and recent court rulings to figure out what to do) " "The headache will be worth it" Those are contradictory, which is my point. What if it turns out you really don't need to host your data in the EU? Then it definitely 'will not have been worth it'. Unless there is some timing risk whereby you risk actually damaging your business because you're under threat of service degradation or litigation because you're 'behind the ball' in which case there might be some rationale for doing it ahead of time. We don't even know for sure what bits of data might need to be moved to be compliant, or that the 're-architecture' itself may not be sufficient and will require 'another rearchitecture' ... Do something when it's clear that it needs to be done, otherwise, I don't see how there is any upside at all.

by oliv__ 5y ago

jollybean 5y ago

Spending a lot of money on something you don't need to do is not 'pragamatic'. "It's unfortunate that finding the answer to such a simple question seems to require lawyers, " Yes, and it's the a problem for the EU. While there is definitely a need to have some kind of regulatory elements in place, the degree of complexity involved creates considerable constraints and overhead for ultimately very little gain. There is probably a version of this legislation, or even better, some kind of 'data treaty' between WTO or OECD nations that makes this work out with a lot less overhead.

oliv__ 5y ago
Whether I "need" it or not depends on how much of my future customer base I estimate will be EU-based. Believe me, I don't think these laws are very well structured (they're not even clear enough that you have to dig through 15 different sources and recent court rulings to figure out what to do) and I don't want to add complexity to my setup, but I am trying to grow my business: if it works out financially with enough new EU customers, then the headache could be worth it.
- jollybean 5y ago
  "I don't think these laws are very well structured (they're not even clear enough that you have to dig through 15 different sources and recent court rulings to figure out what to do) " "The headache will be worth it" Those are contradictory, which is my point. What if it turns out you really don't need to host your data in the EU? Then it definitely 'will not have been worth it'. Unless there is some timing risk whereby you risk actually damaging your business because you're under threat of service degradation or litigation because you're 'behind the ball' in which case there might be some rationale for doing it ahead of time. We don't even know for sure what bits of data might need to be moved to be compliant, or that the 're-architecture' itself may not be sufficient and will require 'another rearchitecture' ... Do something when it's clear that it needs to be done, otherwise, I don't see how there is any upside at all.