4 ms·

> Verify what? ...that can be an expensive question to answer if you're trying to be in compliance and don't know what compliance means. Even an answer of "yo

by quartz 4y ago

> Verify what? ...that can be an expensive question to answer if you're trying to be in compliance and don't know what compliance means. Even an answer of "you need to do nothing" can be pretty expensive.

jacquesm 4y ago
Show me one single instance of a US company that was fined by the EU for being out of compliance when that wasn't patently obvious and without them being warned time and again first. Just one. I'll wait.
- ziddoap 4y ago
  I'm going to go out on a limb and guess that you aren't involved in much risk analysis? Whether or not someone has already been fined (even within your constraints) influences the risk decision, but it does not remove the risk. Since there is still risk, it must be weighed against the organization's risk tolerance. Evidently, the risk still exceeds the risk tolerance of several smaller websites.
  - jacquesm 4y ago
    > I'm going to go out on a limb and guess that you aren't involved in much risk analysis? Try again. I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles.
    - ziddoap 4y ago
      >Try again. They say, without refuting anything. >I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles. I have life insurance, yep! Which includes accidents, etc. Not that either of those situations is remotely analogous to GDPR fines. Edit: I should make it clear that I don't operate the sites, so if your upset about what conclusion these websites came to, take it up with them. I am just pointing out that there still is a risk, and it is obvious that this remaining risk matters to some of these sites as they choose not to serve EU visitors. Do I block EU citizens from my site? No, I don't.
      - jacquesm 4y ago
        It's not the risk analysis that drives these companies to shut down EU traffic, it is cost benefit analysis. Until the USA implements a similar law - hopefully without the warts, which the GDPR definitely has - this situation will persist. Note that parties that make money on their products rather than on their users have no problem with GDPR compliance at all.
- bityard 4y ago
  If you are a US business and have no interest in reaching EU customers, why take the risk, even if it's very small?
  - jacquesm 4y ago
    The simple truth is: these companies are trampling the rights of their visitors, EU or otherwise, but in the case of the EU they have decided that if they can't do that that they'd rather not see them at all. Make of that what you will, but if I were living in the US and an entity would block the EU I would take that as a very bad sign regarding the stewardship of my data in the hands of that company.

by quartz 4y ago

jacquesm 4y ago

Show me one single instance of a US company that was fined by the EU for being out of compliance when that wasn't patently obvious and without them being warned time and again first. Just one. I'll wait.

ziddoap 4y ago
I'm going to go out on a limb and guess that you aren't involved in much risk analysis? Whether or not someone has already been fined (even within your constraints) influences the risk decision, but it does not remove the risk. Since there is still risk, it must be weighed against the organization's risk tolerance. Evidently, the risk still exceeds the risk tolerance of several smaller websites.
- jacquesm 4y ago
  > I'm going to go out on a limb and guess that you aren't involved in much risk analysis? Try again. I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles.
  - ziddoap 4y ago
    >Try again. They say, without refuting anything. >I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles. I have life insurance, yep! Which includes accidents, etc. Not that either of those situations is remotely analogous to GDPR fines. Edit: I should make it clear that I don't operate the sites, so if your upset about what conclusion these websites came to, take it up with them. I am just pointing out that there still is a risk, and it is obvious that this remaining risk matters to some of these sites as they choose not to serve EU visitors. Do I block EU citizens from my site? No, I don't.
    - jacquesm 4y ago
      It's not the risk analysis that drives these companies to shut down EU traffic, it is cost benefit analysis. Until the USA implements a similar law - hopefully without the warts, which the GDPR definitely has - this situation will persist. Note that parties that make money on their products rather than on their users have no problem with GDPR compliance at all.
bityard 4y ago
If you are a US business and have no interest in reaching EU customers, why take the risk, even if it's very small?
- jacquesm 4y ago
  The simple truth is: these companies are trampling the rights of their visitors, EU or otherwise, but in the case of the EU they have decided that if they can't do that that they'd rather not see them at all. Make of that what you will, but if I were living in the US and an entity would block the EU I would take that as a very bad sign regarding the stewardship of my data in the hands of that company.