3 ms·
> The law says user should be aware and able to do informed changes, not that they should be annoyed. Then tell us how companies should implement this law both
by aleph_minus_one 2y ago
> The law says user should be aware and able to do informed changes, not that they should be annoyed.
Then tell us how companies should implement this law both
- without annoying the user
- not being in a risk of getting sued
If the law does not make this relatively easy, one has a right to be furious about the EU.
- wizzwizz4 2y agoIt's written in plain English: you can read it yourself. Articles 5, 12, 24 and 25. The main problem, and the reason certain parties are working so hard not to comply, is that GDPR makes several business models illegal. (Not that I see that as much of a problem.)
- aleph_minus_one 2y ago> It's written in plain English: you can read it yourself. Articles 5, 12, 24 and 25. This is what the law says, but not how shysters/pettifoggers interpret it. :-(
- roenxi 2y ago> It's written in plain English: you can read it yourself. That isn't how the law works for things like this though; what is plain to a lawyer is different to an untrained person. People make that mistake with tax law all the time; they read something and come up with a plain interpretation that shows they don't have to pay their taxes and that delusion persists until someone explains the actual, less plain, reading. It isn't the worst starting point but winging the law with untrained readings is not really acceptable for running a business.
- wizzwizz4 2y agoPeople also come up with "plain interpretations" of the laws of physics that allow them to construct perpetual motion machines. Arrogance and wishful thinking are a bad combination, no matter the field.
- aleph_minus_one 2y ago> People also come up with "plain interpretations" of the laws of physics that allow them to construct perpetual motion machines. But you don't (typically) get into trouble with the law enforcement agencies if you don't/didn't understand the laws of physics correctly.
- thechao 2y agoThey could just not track users? I seem to remember coding a lot of websites that totally failed to track users.
- pnw 2y agoYour websites have no logging at all? Remember, even an IP address is PII under GDPR.
- viraptor 2y agoYou don't have to log IPs. And if you need them for rate limits / abuse prevention, that falls under the "necessary / legitimate interest" rule.
- p_l 2y agoSecurity, debugging and audit logs all fall under "legitimate interest". Just keep them out of hands of parties that might want to use them for other reasons.
- rakoo 2y agoYou don't need to ask if the information you collect is necessary for your site to work.
- aleph_minus_one 2y ago> You don't need to ask if the information you collect is necessary for your site to work. Shysters/pettifoggers are very "flexible" (in a negative way) in the interpretation what is "necessary for your site to work". :-(