4 ms·

Thanks for your response! Honestly I get the T-shirt part this way. You got to Doo crazy stuff as a start-up. I also get that you try ai stuff. As long as you

by eddyzh 2y ago

Thanks for your response! Honestly I get the T-shirt part this way. You got to Doo crazy stuff as a start-up. I also get that you try ai stuff. As long as you keep up de search. However what scares me is the apparent lack of knowledge about privacy, gdpr and what is PII in a product that, to me, is all about privacy. Have one person in the company be an expert in privacy and GDPR etc and use their insights, since it is critical for your right of existence.

agos 2y ago
I got the same impression - the lack of understanding of the basics of GDPR makes them look as amateurs, not professionals trying to raise the bar for privacy. I was considering using Kagi, but this is a massive turn off. They'll likely discover that GDPR is not that optional as soon as a customer (or a competitor with a grudge!) reports them to their relevant national privacy/personal data protection authority, after which they'll get to have a very uncomfortable conversation where they will not be able to use those arguments
- CamperBob2 2y ago
  Kagi is a US company. GDPR is not a US law.
  - budding2141 2y ago
    Does not really matter as long as they offer it in EU countries.
    - CamperBob2 2y ago
      Even so, it doesn't matter unless the CEO ever sets foot in the EU, I suppose. (Do you regularly check to make sure you're obeying laws in countries you don't ever intend to visit? No? Then why should Kagi?)
      - FoeNyx 2y ago
        This should matter if Kagi ever intends to do business in the EU. I suppose a serious breach of regulations, and if Kagi decided to ignore fines, apart from a bad reputation, could ultimately lead to things like judicial decisions of blocking access to the website or blocking payments for EU customers.
    - hanspeter 2y ago
      I think this is an interesting topic. The scope of GDPR is clearly including businesses operating from the US, but has any company registered only in the US ever been fined by EU?
  - hanspeter 2y ago
    To your point: From the original post it was mentioned they created an entity in Germany (for the T-shirts). This means they're exposed to GDPR not only indirectly by serving EU citizens but also directly by operating within the EU.
- Aeolun 2y ago
  It’s very simple to just not have all that much PII or customer data. At that point you can more or less ignore GDRP.

by eddyzh 2y ago

agos 2y ago

I got the same impression - the lack of understanding of the basics of GDPR makes them look as amateurs, not professionals trying to raise the bar for privacy. I was considering using Kagi, but this is a massive turn off. They'll likely discover that GDPR is not that optional as soon as a customer (or a competitor with a grudge!) reports them to their relevant national privacy/personal data protection authority, after which they'll get to have a very uncomfortable conversation where they will not be able to use those arguments

CamperBob2 2y ago
Kagi is a US company. GDPR is not a US law.
- budding2141 2y ago
  Does not really matter as long as they offer it in EU countries.
  - CamperBob2 2y ago
    Even so, it doesn't matter unless the CEO ever sets foot in the EU, I suppose. (Do you regularly check to make sure you're obeying laws in countries you don't ever intend to visit? No? Then why should Kagi?)
    - FoeNyx 2y ago
      This should matter if Kagi ever intends to do business in the EU. I suppose a serious breach of regulations, and if Kagi decided to ignore fines, apart from a bad reputation, could ultimately lead to things like judicial decisions of blocking access to the website or blocking payments for EU customers.
  - hanspeter 2y ago
    I think this is an interesting topic. The scope of GDPR is clearly including businesses operating from the US, but has any company registered only in the US ever been fined by EU?
- hanspeter 2y ago
  To your point: From the original post it was mentioned they created an entity in Germany (for the T-shirts). This means they're exposed to GDPR not only indirectly by serving EU citizens but also directly by operating within the EU.
Aeolun 2y ago
It’s very simple to just not have all that much PII or customer data. At that point you can more or less ignore GDRP.