3 ms·
> "The attack is not recent, however. It dates back to late June - the 26th, to be precise, according to the hacker - and the administration had detected and st
by peri-cl 2mo ago
> "The attack is not recent, however. It dates back to late June - the 26th, to be precise, according to the hacker - and the administration had detected and stopped it at the time, without ever saying a word publicly."
I thought GDPR mandated disclosure of data breaches involving PII. Is France's tax authority somehow exempt?
edit to add: Article 33 particularly,
https://gdpr.eu/article-33-notification-of-a-personal-data-breach/ https://gdpr.eu/article-33-notification-of-a-personal-data-b...
- sam_lowry_ 2mo agoRules for thee not for me.
- hvb2 2mo agoIn the article I read about this it appears that they only found out now. They apparently launched an investigation and discovered the breach after being contacted by the hacker
- rvz 2mo agoNow you are realizing that some "rules" don't apply to others.
- petcat 2mo agoWell it certainly lends credence to the opinion that GDPR and similar regulations are mostly designed for EU revenue generation by extracting fines from American tech companies. The actual privacy protections are secondary.
- Yokolos 2mo agoHaving worked in multiple EU companies that went to great effort to comply with GDPR and also had legitimate issues that needed to be resolved under threat of real fines, this is just an incorrect take.
- Ylpertnodi 2mo agoThat'll be the GDPR that protects my privacy and fines people that fuck about with it?