4 ms·

They place a burden on everyone. A burden that's going to create a two-tier internet where service is immediately refused to EU citizens by every provider exce

They place a burden on everyone. A burden that's going to create a two-tier internet where service is immediately refused to EU citizens by every provider except the giant tech companies that can afford to comply.

Timon3 4y ago
Why exactly is it seemingly so expensive not to sell your customer data?
- alex_sf 4y ago
  That's not the issue. I don't want to see personal data sold either. It's all the little rules. There are hundreds of pages just in GDPR. You need a banner and explicit opt-in just to support login/logout functionality.
  - Timon3 4y ago
    Can you explain why you believe this to be the case? Let's say you log the user in. Yes, you need consent to store a login cookie, but that doesn't mean you need "a banner and explicit opt-in". You only need explicit opt-in, which you can do by... putting a "remember me" box next to your login form[1]. Is that really so hard? [1] https://law.stackexchange.com/a/32157 https://law.stackexchange.com/a/32157
tpxl 4y ago
> giant tech companies that can afford to comply Where does this sentiment come from? Cost of compliance for Facebook is many orders of magnitude higher than cost of compliance for a website for your hairdresser or a restaurant. In my startup, GDPR was barely a blip on our radar. We had to delete website logs and that's about that. You have to keep record of customers/payment information for laws that supersede GDPR, and that's it if you run a legitimate business not reliant on stealing.
- alex_sf 4y ago
  This simply isn't true. Look at the absurdity of all the cookie banners just to support basic login functionality. I'm all for internet privacy, but these laws are so sweeping that it's impossible to be compliant without a dedicated function for it.
  - lawik 4y ago
    No need for cookie banners for functionality like login. Ref: https://law.stackexchange.com/a/32157 https://law.stackexchange.com/a/32157
quicksilver03 4y ago
Close, the giant tech companies may or may not comply but they surely can afford the fines that the various EU Data Protection authorities dream into reality by twisting an ever-changing body of interpretation of ambiguously written rules.

Timon3 4y ago

Why exactly is it seemingly so expensive not to sell your customer data?

alex_sf 4y ago
That's not the issue. I don't want to see personal data sold either. It's all the little rules. There are hundreds of pages just in GDPR. You need a banner and explicit opt-in just to support login/logout functionality.
- Timon3 4y ago
  Can you explain why you believe this to be the case? Let's say you log the user in. Yes, you need consent to store a login cookie, but that doesn't mean you need "a banner and explicit opt-in". You only need explicit opt-in, which you can do by... putting a "remember me" box next to your login form[1]. Is that really so hard? [1] https://law.stackexchange.com/a/32157 https://law.stackexchange.com/a/32157

tpxl 4y ago

> giant tech companies that can afford to comply Where does this sentiment come from? Cost of compliance for Facebook is many orders of magnitude higher than cost of compliance for a website for your hairdresser or a restaurant. In my startup, GDPR was barely a blip on our radar. We had to delete website logs and that's about that. You have to keep record of customers/payment information for laws that supersede GDPR, and that's it if you run a legitimate business not reliant on stealing.

alex_sf 4y ago
This simply isn't true. Look at the absurdity of all the cookie banners just to support basic login functionality. I'm all for internet privacy, but these laws are so sweeping that it's impossible to be compliant without a dedicated function for it.
- lawik 4y ago
  No need for cookie banners for functionality like login. Ref: https://law.stackexchange.com/a/32157 https://law.stackexchange.com/a/32157

quicksilver03 4y ago

Close, the giant tech companies may or may not comply but they surely can afford the fines that the various EU Data Protection authorities dream into reality by twisting an ever-changing body of interpretation of ambiguously written rules.