3 ms·
I'm aware HN has a dim view of the GDPR, but I previously worked in compliance and it was a sea change in how big corporations and organizations viewed data col
by michaelbuckbee 3y ago
I'm aware HN has a dim view of the GDPR, but I previously worked in compliance and it was a sea change in how big corporations and organizations viewed data collection.
User PII and especially sensitive data suddenly was viewed as "toxic" and that having it around was something that could only bring them hassle.
California's data privacy acts are similar (but much more narrowly focused).
Also, I always like to sum up what the intent of these acts typically are and what compliance means:
- Tell people what data you're going to collect and, what you do with it, who you share it with
- Keep their data reasonably secure
- Delete it if they ask
- ryandrake 3y agoUser data should be treated like uranium, not like oil. Both are valuable, but you don't want to just accumulate and store uranium. You want only as much as you absolutely positively need, hold it securely, and then to get rid of it as soon as you don't need it anymore.