4 ms·

What did measures like gdpr ever achieve except for making me click a cookie prompt away.

by mbix77 7mo ago

Rygian 7mo ago
Actual punitive measures taken against entities who e.g. manipulate personal data in a negligent way. [1] Which was much harder to achieve before. [1] https://www.enforcementtracker.com/ https://www.enforcementtracker.com/
loloquwowndueo 7mo ago
Right to be forgotten - you can ask companies to delete data they hold on you. Data ownership/portability : you can ask companies for a copy of all data they hold on you or related to you. I’ve seen the latter used by job applicants to get an entire copy of their interviews, transcripts and assessments including the reason for not being hired.
etothepii 7mo ago
In the UK open banking was essentially a response to GDPR this has allowed (to a limited extent) a variety of tools to be built on top of bank accounts that others would not have been.
- pjc50 7mo ago
  That was actually the two Payment Services Directives: https://blog.finexer.com/guide-to-psd2-regulation-for-open-banking/ https://blog.finexer.com/guide-to-psd2-regulation-for-open-b...
pjc50 7mo ago
GDPR doesn't apply in the states, but hopefully it provides for some punishment for the poor security here for EU customers. Of course, then some Americans will get mad that a US company has to follow EU law.
- ralferoo 7mo ago
  The GDPR applies worldwide to any data held about EU or UK citizens, regardless of where they reside. It does apply in the US, it's just potentially harder for the EU to enforce meaningful penalties for infractions.
  - majorchord 7mo ago
    > It does apply in the US EU law does not apply to US citizens residing in the US with no ties to the EU.
    - ralferoo 7mo ago
      Correct. It does not apply to US citizens residing anywhere in the world. It does, however, as I said, apply to EU citizens regardless of where in the world they reside. If a company holds data about EU citizens, the GDPR applies to them, regardless of where that company is based. Including the US. Hence the statement "It (GDPR) does apply in the US" is completely correct.
      - quesera 7mo ago
        It's written that way, perhaps. But there's no jurisdictional reality that any of country/union A's rights will protect a person while they are present in country/union B. In the same way that a US citizen does not have legal protection for free speech when present in, e.g. China, Saudi Arabia, or Germany. Even if the EU got the text incorporated into the UN Universal Declaration of Human Rights, there are famously many countries who are not signatories (and it would require a locally-implemented actual law to support its recognition). The EU can arrange post facto penalties for violations of their citizens' rights, to be (potentially) administered in the future, when a responsible entity enters EU jurisdiction, but absolutely not before then without cooperation by treaty with the nation where these foreign-and-not-real "rights" were violated. Which would be a surrender of sovereignty and basically unimaginable. (No comment on the goodness or successfulness of the GDPR here, just that no part of it is relevant outside of the EU regardless of how the text is composed.) (And this is all written with awareness that the US somehow manages to selectively enforce their laws extra-jurisdictionally in weak foreign nations. The EU is not the US, and the US is not weak.)
throwaway270925 7mo ago
Since people still seem to conflate the two, let me say it loud and clear: GDPR HAS NOTHING TO DO WITH THE COOKIE PROMPTS!
saithir 7mo ago
It's really a wonder how every time gdpr is even remotely related, there's always gotta be someone complaining about how gdpr is at fault for the cookie/data prompts, and never that sites and advertising companies (and their 2137 partners) are at fault for actually making those prompts as annoying as possible in hopes that you just agree.
akimbostrawman 7mo ago
It makes you aware a site is selling your data or is otherwise tracking you because otherwise they would not need a banner to request for consents to do so :)

What did measures like gdpr ever achieve except for making me click a cookie prompt away.

by mbix77 7mo ago

What did measures like gdpr ever achieve except for making me click a cookie prompt away.

Actual punitive measures taken against entities who e.g. manipulate personal data in a negligent way. [1] Which was much harder to achieve before. [1] https://www.enforcementtracker.com/ https://www.enforcementtracker.com/

loloquwowndueo 7mo ago

Right to be forgotten - you can ask companies to delete data they hold on you. Data ownership/portability : you can ask companies for a copy of all data they hold on you or related to you. I’ve seen the latter used by job applicants to get an entire copy of their interviews, transcripts and assessments including the reason for not being hired.

etothepii 7mo ago

In the UK open banking was essentially a response to GDPR this has allowed (to a limited extent) a variety of tools to be built on top of bank accounts that others would not have been.

pjc50 7mo ago
That was actually the two Payment Services Directives: https://blog.finexer.com/guide-to-psd2-regulation-for-open-banking/ https://blog.finexer.com/guide-to-psd2-regulation-for-open-b...

pjc50 7mo ago

GDPR doesn't apply in the states, but hopefully it provides for some punishment for the poor security here for EU customers. Of course, then some Americans will get mad that a US company has to follow EU law.

ralferoo 7mo ago
The GDPR applies worldwide to any data held about EU or UK citizens, regardless of where they reside. It does apply in the US, it's just potentially harder for the EU to enforce meaningful penalties for infractions.
- majorchord 7mo ago
  > It does apply in the US EU law does not apply to US citizens residing in the US with no ties to the EU.
  - ralferoo 7mo ago
    Correct. It does not apply to US citizens residing anywhere in the world. It does, however, as I said, apply to EU citizens regardless of where in the world they reside. If a company holds data about EU citizens, the GDPR applies to them, regardless of where that company is based. Including the US. Hence the statement "It (GDPR) does apply in the US" is completely correct.
    - quesera 7mo ago
      It's written that way, perhaps. But there's no jurisdictional reality that any of country/union A's rights will protect a person while they are present in country/union B. In the same way that a US citizen does not have legal protection for free speech when present in, e.g. China, Saudi Arabia, or Germany. Even if the EU got the text incorporated into the UN Universal Declaration of Human Rights, there are famously many countries who are not signatories (and it would require a locally-implemented actual law to support its recognition). The EU can arrange post facto penalties for violations of their citizens' rights, to be (potentially) administered in the future, when a responsible entity enters EU jurisdiction, but absolutely not before then without cooperation by treaty with the nation where these foreign-and-not-real "rights" were violated. Which would be a surrender of sovereignty and basically unimaginable. (No comment on the goodness or successfulness of the GDPR here, just that no part of it is relevant outside of the EU regardless of how the text is composed.) (And this is all written with awareness that the US somehow manages to selectively enforce their laws extra-jurisdictionally in weak foreign nations. The EU is not the US, and the US is not weak.)

throwaway270925 7mo ago

Since people still seem to conflate the two, let me say it loud and clear: GDPR HAS NOTHING TO DO WITH THE COOKIE PROMPTS!

saithir 7mo ago

It's really a wonder how every time gdpr is even remotely related, there's always gotta be someone complaining about how gdpr is at fault for the cookie/data prompts, and never that sites and advertising companies (and their 2137 partners) are at fault for actually making those prompts as annoying as possible in hopes that you just agree.

akimbostrawman 7mo ago

It makes you aware a site is selling your data or is otherwise tracking you because otherwise they would not need a banner to request for consents to do so :)