gcthomas

19 ms·

151.
by gcthomas 8y ago
Absolutely, I agree. I was responding, specifically, to @rdlecler1 who claimed that "Yes, every US company must hire an EU representative to be compliant." Many small orgs, even if serving EU citizens, will not need an EU Resi
152.
by gcthomas 8y ago
Thanks. I mixed up the name, though, not the role. Your link says that the requirement for an EU rep "shall not apply to: processing which is occasional, does not include, on a large scale, processing of special categories of data as
153.
by gcthomas 8y ago
I was in discussion with a poster who was working for a company structured "in a bunch of verticals with a lot of different systems that can't all be made to talk to one another". Don't you think that size of company wou
154.
by gcthomas 8y ago
Any business trading internationally has to have a care over the regulatory environment of the target country. Why is internet trading any different? What I meant by the 'four years' comment was not that it takes that long to trai
155.
by gcthomas 8y ago
Oh, only seven months to look at it? What were the lawyers doing all that time before then? IT techs here have been training for GDPR for the four years since the law was first designed.
156.
by gcthomas 8y ago
You need a DPO if you are a public authority (eg government body or public school) or if you carry out "regular and systematic monitoring of data subjects on a large scale or when processing special categories of data …". If you r
157.
by gcthomas 8y ago
It will likely be years before any small business gets a routine regulatory enquiry, unless there is a complaint. And that is how it should be, isn't it?
158.
by gcthomas 8y ago
You had two years to sort out a quick procedure for doing this process, and it still took an hour and a half. Didn't you have a script to do that semi-automatically?
159.
by gcthomas 8y ago
Most companies do not need an EU resident DPO at all.
160.
by gcthomas 8y ago
There is no violation of the GDPR in just holding data, especially data for which you have a legitimate business reason to process. It is probably PII, so look after it as you would other PII. The GDPR give a number of reasons where the r
161.
by gcthomas 8y ago
Consent is usually not needed, since there are plenty of other lawful reasons for processing data. Small businesses will not usually need a DPO, and neither will many large ones. Small businesses will have proportionate fines, and pro
162.
by gcthomas 8y ago
They are losing money because they have an unsustainable pricing model. Other cinema services were saying Movie pass would fail as soon as they started.
163.
by gcthomas 8y ago
Only until the TTIP treaty gets finalised! Then there may be a mechanism for some comeback.
164.
by gcthomas 8y ago
Isn't Moviepass hæmmoraging $20 million a day while its share price tanks? No, if you knew how Europeans think, you'd realise that this is really just about securing privacy. Most of the regulators are really focussed on ensuring
165.
by gcthomas 8y ago
Of course, it all may well depend on whether such terms are reasonable and legal. There are plenty of consumer protection laws that nullify all sorts of 'agreed' terms.
166.
by gcthomas 8y ago
If the data collected is not personally identifying data, then GDPR is not interested in it. Maybe it is PII, but the quoted policies don't say that. > We may also use cookies, device information and IP addresses, along with clear
167.
by gcthomas 8y ago
Assuming that birds are a group of therapod dinosaurs, as many scientists now describe them, it is true that all extant dinosaurs are feathered. But it is exciting to see these fossils discovered, so perhaps they should be described as
168.
by gcthomas 8y ago
He sent his CTO to the Commons Committee in the UK, and he failed to answer a whole host of questions satisfactorily: 'Damian Collins, the chair of the DCMS committee, said: “We asked them to look for evidence of Russian influence and
169.
by gcthomas 8y ago
I use Naked Browser with the JS blocking option on, and there is a quick-set button to load the JS if needed. (Naked Browser also lets me block 3rd party cookies and use adblock blacklists)
170.
by gcthomas 8y ago
It is true — you need to read the actual GDPR rather than online summaries. The GDPR creates some new criminal offences that can be prosecuted through courts without the regulatory authorities being involved in Clauses 162 & 163. Articl
171.
by gcthomas 8y ago
The GDPR regulation directly applies in all member states, and does not need individual states to do anything at all to enact it. If national courts decline to enforce it then it can escalate to the Eu courts. It is also international in th
172.
by gcthomas 8y ago
>(and investing in compliance with European - absolutely not international - regulations) Did you think about this before typing? Clue: how many countries does an EU-wide law directly apply to? One? Or many?
173.
by gcthomas 8y ago
I'm not convinced that the author is as knowldegeable as he thinks he is. quote: "We might expect to see some stars growing brighter throughout the spring on account of Earth approaching them, and then growing dimmer throughout th
174.
by gcthomas 8y ago
The EU HASN'T delegated everything to local regulators. Have you not come across the Article 29 Working Party, which is dedicated to standardising GDPR interpretations across the EU?
175.
by gcthomas 8y ago
There is an exemption for vexacious or disproportionately costly requests, so once everything has settled down and it is clear how the regulators deal with complaints, then it should work out ok.
176.
by gcthomas 8y ago
Yes, and it is not that hard a read. The only problems people seem to be having are in trying to finesse the rules to avoid looking after data with due diligence. If you really want to look after data, then you just need to do that, and you
177.
by gcthomas 8y ago
The problem with the laws stemming from the DPD was that there were different laws in each EU country, and the enforcement options were too weak for slippery international corporations. One critical change in the GDPR is the mandatory repor
178.
by gcthomas 8y ago
The regulators have been running for two decades, and this is EXACTLY how they operate. Scepticism in this case is unreasonable, given the massive evidence base.
179.
by gcthomas 8y ago
The national regulators have been operating the previous regime for twenty years, so there IS plenty of experience and history to look at. The UK's ICO has made quite clear that the style will not change, as have bodies in other countr
180.
by gcthomas 9y ago
I use Vim on Debian Testing, and right-click paste works fine on Gnome Terminal and Konsole, but does visual mode like you find in Xterm or UXterm.

More ›