10 ms·

If breaches were automatic jail time, no one in their right mind would want these jobs. One same reaction would be to stop collecting personal data, but a lot

If breaches were automatic jail time, no one in their right mind would want these jobs. One same reaction would be to stop collecting personal data, but a lot of Internet businesses would have a hard time adjusting to that. A more practical policy proposal would criminalize extreme negligence while focusing on financial penalties for lesser beaches. Possibly the young missing vs current policies is that the duty to protect user data should probably increase with the amount of data collected - the juicier target you make your company, the more the penalty needs to hurt. This could mean companies taking a hard look e.g. at whether they really need your address and phone number because every extra bit of hacked information should cost them more.

thanksgiving 2y ago
Prison time should be limited to the CEO and board members.
- smolder 2y ago
  In general, prison time is for the peasants, not the royalty.
strogonoff 2y ago
Imagine if software engineers had to have a license, and they stood to lose their license in cases of malpractice. When your license is your bread & butter and you cannot work without it, losing it is devastating—and much more devastating than losing a particular position at some company (so even if you are required to implement an insecure solution, you would have no problems telling respective manager to shove it, respectfully).
Nextgrid 2y ago
> a lot of Internet businesses would have a hard time adjusting to that. Why? The majority of situations where you need an account can be replaced with pseudonymous info. Netflix needs an account and some payment data (which can itself be a pseudonymous card number with no identifying info attached), but it doesn't need to know my name or anything else. I can see that the whole advertising/data broker/"growth & engagement" crowd would end up begging on the streets, but I'm not sure many actually valuable businesses would be affected all that much.

thanksgiving 2y ago

Prison time should be limited to the CEO and board members.

smolder 2y ago
In general, prison time is for the peasants, not the royalty.

strogonoff 2y ago

Imagine if software engineers had to have a license, and they stood to lose their license in cases of malpractice. When your license is your bread & butter and you cannot work without it, losing it is devastating—and much more devastating than losing a particular position at some company (so even if you are required to implement an insecure solution, you would have no problems telling respective manager to shove it, respectfully).

Nextgrid 2y ago

> a lot of Internet businesses would have a hard time adjusting to that. Why? The majority of situations where you need an account can be replaced with pseudonymous info. Netflix needs an account and some payment data (which can itself be a pseudonymous card number with no identifying info attached), but it doesn't need to know my name or anything else. I can see that the whole advertising/data broker/"growth & engagement" crowd would end up begging on the streets, but I'm not sure many actually valuable businesses would be affected all that much.