lmkg

39 ms·

391.
by lmkg 6y ago
GDPR covers personal information, regardless of when or where it's stored. The ePrivacy Directive (which is called the "EU Cookie Law," the same way that the ACA is called "Obamacare") covers reading or writing data
392.
by lmkg 6y ago
This is actually a really important part of the issue. One of the things that stops GDPR from being a total clusterfuck is the so-called "one-stop shop mechanism." Each country has its own regulator, so GDPR is enforced by 27 diff
393.
by lmkg 6y ago
Keep in mind that the Internet actually has more bot traffic than human traffic these days. A 50% discrepancy between Google Analytics and access logs could be explained entirely by bot traffic with no ad-blockers involved. It could be ad-b
394.
by lmkg 6y ago
If someone makes inferences on the de-identified data, or joins it against another dataset. The source dataset lets those inferences or joins be tied back to the original identifying data. The main point is that de-identified data can still
395.
by lmkg 6y ago
Since names are often assumed to be not case-sensitive. Although every once in a while you still see a system that renders names in all uppercase, with the lone exception of a lowercase c in Scottish surnames starting with Mc-.
396.
by lmkg 6y ago
Facebook is currently involved in multiple legal battles in Europe about the GDPR, including at least one where it's the instigator. Facebook has different views about what's allowed under the GDPR compared to the people in charge
397.
by lmkg 6y ago
A 'place' is not a meaningful unit of civic participation. From one direction, California and New York are populous. California has 4 individual cities that each have a higher population than Wyoming. Is it unfair that California&
398.
by lmkg 6y ago
It's accurate, though. When I am evaluating devices to buy, a metric I care about is "after I buy this, how long will it remain up-to-date with security patches?" And the answer to that question is "on the day that you b
399.
by lmkg 6y ago
If the money is in your bitcoin wallet, then the government has the same access to it as if the money were paper dollars hidden under your mattress. Coercion is available, but they cannot take it directly. If your money is in a (regulated)
400.
by lmkg 6y ago
With ubiquitous surveillance, you can build a database of the location activity of all citizens. This is problematic for several reasons, with top-of-mind right now being targeting individuals for political reasons, but also stuff like what
401.
by lmkg 6y ago
I don't think you're fully appreciating what this bans. The concern is not taking picture of a crime scene. The concern is having always-on camera feeds with facial recognition running. I.e., being able to trace the movements of i
402.
by lmkg 6y ago
Several regulators have made unambiguous statements that they are not compliant. However, they are not very high on the enforcement priorities. ICO, the UK regulator, seems to take a dim view of dark patterns, but they're only outright
403.
by lmkg 6y ago
GDPR regulates tracking individuals, and is not particular about the means or form. On the whole, GDPR is pretty sensible. There is an older law called the ePrivacy Directive that regulates cookies. Under this law, cookies require consent e
404.
by lmkg 6y ago
GDPR superceded the Data Protection Directive. The "cookie law" is the ePrivacy Directive, which remains in force.
405.
by lmkg 6y ago
> But the regulator guide is about GDPR. The linked URL literally says "Guide to PECR." PECR is the cookie law you're referring to. It is not a guide to GDPR.
406.
by lmkg 6y ago
Do you have plans to expand to CCPA requests as well? Some US companies will loudly and vehemently not care about European laws, but are beholden to California laws.
407.
by lmkg 6y ago
I hold a certification in information privacy, so my totally-biased answer is "hire an expert!" :p The reading/writing requirements are from PECR, which is old and dumb. Passed in 2003ish, and was basically ignorable until GD
408.
by lmkg 6y ago
The report I am referring to is this "cookie sweep" performed by the Irish DPA. It is especially significant because the Irish DPA is the one with jurisdiction over many US tech companies, who incorporate their EU operations in Ir
409.
by lmkg 6y ago
Fun fact: loading chat boxes on pageload can get you in hot water with GDPR/PECR! Most such services use cookies in some fashion. You don't need consent for cookies that are "strictly necessary" to provide a service, but
410.
by lmkg 6y ago
They're not comparable. Plugins is basically a O(1) task: You set them up once and then they're done. If your set isn't set up for technical SEO then crawlers can't read it and you won't rank well. But once you&#x27
411.
by lmkg 6y ago
> Is this not the standard nowadays The AMP spec mandates the exact opposite, for whatever that's worth as a "standard."
412.
by lmkg 6y ago
I think you could make a good definition based on the institutional knowledge of a system, and how much of the system is not included in that knowledge.
413.
by lmkg 6y ago
The arguments and return value of Min and Max are strictly essential to their function. Their inclusion as top-level items in a Math package is not. One could imagine alternate taxonomies where, e.g., the Math package is divided into Arithm
414.
by lmkg 6y ago
I think you're a bit confused by what Google Analytics is. It's not a service API, it's got nothing to do with the back-end. You put a snippet of JS on your page, and then the agency that does your SEO can log in to Google to
415.
by lmkg 6y ago
That is not how Google Analytics works. Its cookie (the Client ID) is a first-party cookie set on the domain of the website hosting it. Google Analytics optionally integrates with both Google Ads and DoubleClick, and both of those integrati
416.
by lmkg 6y ago
The case you mention is one-half of the picture, and I feel it's important to mention the other half. The White Pages are not copyright-able, which is what your case describes. But the Yellow Pages are copyright-able (somewhat). This
417.
by lmkg 6y ago
It's a breach of GDPR, which is not the same as being a data breach under GDPR. And by "not the same" I mean like 99.5% disjoint.
418.
by lmkg 6y ago
According to GDPR, the contact info for sending an access or deletion request must be provided in the Privacy Policy. Under GDPR (Europe), if you send a request, the company must honor it unless they have reason to doubt your identity, in w
419.
by lmkg 6y ago
Not even the EU as a whole, it's up to the individual regulators in each country. On a related note: Since most US companies base their EU subsidiaries in Ireland for tax purposes, it's actually just up to the Irish regulator. The
420.
by lmkg 6y ago
It's more complicated than "banned," but if you want the details, I can give them. In short, you can't use non-essential cookies unless you have consent. Companies want to use non-essential cookies, so they're try

More ›