2 ms·

It is regulation that imagines companies are a government bureaucracy. I have read GDPR and don't work in adtech. It is vague and it is pretty easy to find pat

It is regulation that imagines companies are a government bureaucracy. I have read GDPR and don't work in adtech. It is vague and it is pretty easy to find pathological scenarios that don't make much sense or impose an unusually high burden for no benefit. Every European law firm seems to agree with this assessment despite what proponents assert. Consequently, it forces a lot of expensive defensive activity in practice. To some extent, it was just a failure of imagination on the part of GDPR's authors. Many things are not nearly as simple as it seems to assume and it bleeds into data models that have nothing to do with people. It is what it is but no one should pretend it is not a burden for companies that have nothing to do with adtech or even data about people.

troupo 6mo ago
> I have read GDPR and don't work in adtech. It is vague As laws go, it's crystal clear > is pretty easy to find pathological scenarios Laws in general don't try to tell you how to implement every single facet of every single human endeavor. Otherwise no laws would be written, and those that would get written would be incomprehensible monstrosities. To not repeat myself, I have more here: https://news.ycombinator.com/item?id=47811648 https://news.ycombinator.com/item?id=47811648 For 99.999% of businesses GDPR is trivial. For 99.999% of the remaining businesses it's either covered by other laws (banking) or is only difficult to implement because they were ised to collecting user data en masse (any social netowrk or streaming service). There are very, very, very few instances were GDPR cannot be applied using basic common sense.