4 ms·

The GDPR comment perhaps is indicative of this out of all. GDPR enforcement has been small, ineffective and nowhere close to "every kind of violation gets an ex

The GDPR comment perhaps is indicative of this out of all. GDPR enforcement has been small, ineffective and nowhere close to "every kind of violation gets an expensive lawsuit attached". It's as if this is meta-commentary.

mrtksn 3y ago
I don't know why there needs to be "iron fist nazi approach, hanging people for the smallest violation" kind of enforcement of the GDPR to be effective. Europeans are not that much into laws and enforcement of it, there's always some level of disorder and lawlessness and the police wouldn't start shooting immediately. Things tend to be corrected after some scandal or if the issue grows to be actually impactful. GDPR essentially makes companies mindful about how they store and transfer data and if something goes wrong, it is useful to tell what went wrong and who is responsible about it. There's no EU police going around and nocking on the doors, taking people in for the smallest violation.
- shortsunblack 3y ago
  There should be sth closer to an 'iron fist' approach, though. GDPR is a general data protection law. It's the lowest common denominator for all of industry. Industries that are particularly invasive to privacy are to be (and currently are) regulated with more specific legislation that adds to GDPR. Some provisions of DMA and DSA, for example, add more regulatory cost to Big Tech and Big Tech solely. ePrivacy is also lex specialis to GDPR, and further hampers adtech privacy invasions. There must be more GDPR enforcement. Not just against the primary culprits.
  - mrtksn 3y ago
    Maybe, but EU doesn’t actually have a way to enforce it directly. Instead, countries adopt their laws to the requirements and they enforce it. You end up with something that represents the character of every country, this usually means laws followed and enforced in the north and west, not so much in the south east.

mrtksn 3y ago

I don't know why there needs to be "iron fist nazi approach, hanging people for the smallest violation" kind of enforcement of the GDPR to be effective. Europeans are not that much into laws and enforcement of it, there's always some level of disorder and lawlessness and the police wouldn't start shooting immediately. Things tend to be corrected after some scandal or if the issue grows to be actually impactful. GDPR essentially makes companies mindful about how they store and transfer data and if something goes wrong, it is useful to tell what went wrong and who is responsible about it. There's no EU police going around and nocking on the doors, taking people in for the smallest violation.

shortsunblack 3y ago
There should be sth closer to an 'iron fist' approach, though. GDPR is a general data protection law. It's the lowest common denominator for all of industry. Industries that are particularly invasive to privacy are to be (and currently are) regulated with more specific legislation that adds to GDPR. Some provisions of DMA and DSA, for example, add more regulatory cost to Big Tech and Big Tech solely. ePrivacy is also lex specialis to GDPR, and further hampers adtech privacy invasions. There must be more GDPR enforcement. Not just against the primary culprits.
- mrtksn 3y ago
  Maybe, but EU doesn’t actually have a way to enforce it directly. Instead, countries adopt their laws to the requirements and they enforce it. You end up with something that represents the character of every country, this usually means laws followed and enforced in the north and west, not so much in the south east.