donogh

8 ms·

31.
by donogh 8y ago
No argument on either point. We have to be practical, though, and the law is usually forgiving of such practicalities. You're right, though: strictly speaking, it's not compliant.
32.
by donogh 8y ago
That's the right to data portability, which is your right to have your data with an electronic service transferred to another service in a machine readable format. It has nothing to do with data subject access requests, which is encode
33.
by donogh 8y ago
It does not have to be machine readable. GDPR is technologically neutral. If the medium of storage is paper, a data subject access request can be fulfilled on paper. For example, photocopy the page, redact the other names, and mail the copy
34.
by donogh 8y ago
I would say that you could provide a notice specifying that signing the guestbook also constitutes consent to the public display of the person's name. If you want to take it further, you could ask them to submit a small form confirming
35.
by donogh 8y ago
A small shop absolutely does not need a DPO. See guidance here: http://gdprandyou.ie/data-protection-officer/ If the small shop happens to be collecting sensitive personal data -- health data, political affiliations or
36.
by donogh 8y ago
A school does not necessarily meet the definition of a public authority [1]; I would say it's not; it depends on individual EU countries to legislate on that definition. Furthermore, in Ireland, for example, fines cannot be levied agai
37.
by donogh 8y ago
Unfortunately, most organisations need professional guidance on GDPR, and that's not necessarily cheap or accessible to the budget-constrained. A few points on their issues (IANAL): 1. Most organisations do NOT need a Data Protection O
38.
by donogh 8y ago
Really nice idea. What immediately jumps out is there are checkboxes for tasks that don't apply to everyone. For example, most companies won't need a Data Protection Officer (DPO). Still, the world needs more clarity on GDPR, and
39.
by donogh 8y ago
Strange, still works for me! Here's the actual ruling: http://curia.europa.eu/juris/document/document.jsf?text=&doc...
40.
by donogh 8y ago
If this were to come before the CJEU[1], it would not be clear-cut at all. There was a landmark case where home CCTV was ruled inadmissible in a robbery by virtue of the fact that it included footage of a public road, and the thieves did no
41.
by donogh 8y ago
Not contradicting, worth pointing out for the Americans in the audience: even if you have an exclusively US-based company, working with any EU users means you are in scope for GDPR. The consequences for violating GDPR are quite severe --
42.
by donogh 9y ago
Impressive! Only negative: the "Slides from Recent Talks" section is all broken links.
43.
by donogh 9y ago
Amazon doesn't provide a sandbox for any of its sites, making it quite challenging to integrate with Seller Central in any region.
44.
by donogh 9y ago
If you're curious about the future of privacy, while flawed in some ways, the GDPR (General Data Protection Regulation) comes into effect in the EU next May. Here's their definition of personal data [1]: "Personal data me
45.
by donogh 9y ago
Do you think there'll end up being due process with this approach? And fair trials? I wouldn't be so quick to endorse a dictatorship's approach to law and justice.
46.
by donogh 9y ago
In this case, 'elements' seems to refer to the number of sections of the set that are independent -- the stages of the rocket, the lander, the astronauts, etc. Also, they specifically refer to the "LEGO Ideas" collection
47.
by donogh 9y ago
Speculation: maybe it involves hiding bomb components in multiple passengers' laptops, then combining them in-flight?
48.
Inadequate Smartphone Security as Second-Hand Smoke(medium.com)
3 points by donogh 10y ago|0 comments