3 ms·
https://mailchimp.com/about/security/#Protecting_Ourselves_Against_You https://mailchimp.com/about/security/#Protecting_Ourselves_A... >Yes, you heard that cor
by 1970-01-01 4y ago
https://mailchimp.com/about/security/#Protecting_Ourselves_Against_You https://mailchimp.com/about/security/#Protecting_Ourselves_A...
>Yes, you heard that correctly. We can secure ourselves like Fort Knox, but if your computer gets compromised and someone gets into your Mailchimp account, that's not good for either of us.
So mailchimp is SOC2, ISO, PCI, etc. and still gets worried about themselves if a user account is hacked.
- suresk 4y agoNot defending their actions in this particular case, but yes, I think it is completely reasonable for a service like MailChimp to be concerned about unauthorized use of user accounts. If someone takes over a MailChimp account, it is almost certainly to send spam/fraud type stuff, which causes harm to MailChimp in various ways. Compliance with those standards doesn't mean they aren't potentially impacted by that sort of thing, and doing what they can to detect and mitigate unauthorized user account usages is part of at least a few of them.
- Traubenfuchs 4y agoThat openly user hostile language must be one of its kind.
- dylan604 4y agoreading further down that page... "We retain a law firm in the UK to consult on EU privacy issues." wouldn't it be better to retain a law firm that's actually in the EU? hiring a UK law firm for EU matters is no different that hiring a US law firm, or AUS, or whatever non-EU country
- jkaplowitz 4y agoWhile that is true in the sense that the UK is no longer in the EU, I don't believe UK law has yet diverged from EU law on any relevant privacy issues, so UK firms would still have significant experience in this area. A firm within the EU would be a better choice, I agree.
- NoboruWataya 4y agoAlso, a lot of international companies will just retain an international law firm headquartered in the UK for everything. That law firm will have offices all over the world, including in several EU jurisdictions, that they will outsource to when necessary to advise on EU legal issues.
- pxeger1 4y agoThe UK is subject to the UK GDPR, which has no material differences to the EU GDPR. There are probably some other differences, but the UK is much better than USA or Australia etc. (Although I'm surprised there aren't USA-based law firms which specialise in European privacy laws, because of their impact on tech companies)
- dylan604 4y agoyeah, but the people that work with the UK law firm probably go to the UK to have meetings just so they can update their out-of-office replies with "i'll be away for meetings in the UK for...blahblahblah" just so they look cooler than the schmucks that have meetings across town. so that's why they choose non-local talent, just for their egos. or, maybe i'm confusing them with ad agency types that i've worked with in the past and i'm just projecting one ego industry to another?