3 ms·

Creating a database of their citizens using a private company has opened up exactly the kind of privacy problems that anyone on here could have expected. Maybe

Creating a database of their citizens using a private company has opened up exactly the kind of privacy problems that anyone on here could have expected. Maybe they should just use GDPR to delete the data before it’s exfiltrated?

Cthulhu_ 9mo ago
GDPR isn't a technology, it doesn't work like that. Deleting data would cripple all digital services. The problem is that they privatized it. But that in turn is caused by the wage structure; if you work for the government, you fall under its collective wage system, and the way it's set up... can't compete with private companies, especially not in IT services. So the government ends up outsourcing most IT projects, with mixed success and costing them a lot. But with this, it also opens them up to risk. I get the wage thing, but they need to be able to control these things. 51% of nontransferable shares of all companies involved.
- m000 9mo ago
  > can't compete with private companies, especially not in IT services. FWIW, SURF [1] (the Dutch university network operator) successefully operates much more complex digital infrastructure. So, going with a fully private infrastructure provider was a choice, not a necessity. Using SURF would not be without precedent. The Greek government has been successfully using GRNET [2] (the Greek counterpart of SURF) for hosting and developing digital infrastructure. [1] https://www.surf.nl/ https://www.surf.nl/ [2] https://grnet.gr/en/government/ https://grnet.gr/en/government/
bux93 9mo ago
DigiD is "the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller", and thus falls under paragraph 3(b), which excempts this data from the Right to erasure. In much the same way that the IRS won't delete your data if you tell them you're a sovereign citizen.

Cthulhu_ 9mo ago

GDPR isn't a technology, it doesn't work like that. Deleting data would cripple all digital services. The problem is that they privatized it. But that in turn is caused by the wage structure; if you work for the government, you fall under its collective wage system, and the way it's set up... can't compete with private companies, especially not in IT services. So the government ends up outsourcing most IT projects, with mixed success and costing them a lot. But with this, it also opens them up to risk. I get the wage thing, but they need to be able to control these things. 51% of nontransferable shares of all companies involved.

m000 9mo ago
> can't compete with private companies, especially not in IT services. FWIW, SURF [1] (the Dutch university network operator) successefully operates much more complex digital infrastructure. So, going with a fully private infrastructure provider was a choice, not a necessity. Using SURF would not be without precedent. The Greek government has been successfully using GRNET [2] (the Greek counterpart of SURF) for hosting and developing digital infrastructure. [1] https://www.surf.nl/ https://www.surf.nl/ [2] https://grnet.gr/en/government/ https://grnet.gr/en/government/

bux93 9mo ago

DigiD is "the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller", and thus falls under paragraph 3(b), which excempts this data from the Right to erasure. In much the same way that the IRS won't delete your data if you tell them you're a sovereign citizen.