GDPR - General Data Protection Regulation

I know almost nothing about this...
Is it a good thing or a bad thing ?

Attached: GDPR.png (1920x1080, 377K)

Other urls found in this thread:

google.com/maps/timeline?pb
myactivity.google.com/myactivity
google.com/settings/ads/
twitter.com/SFWRedditVideos

It's a good thing.

In short it means that you can request all information companies have about you, and these companies are required to give you everything they have.

It means that companies can no longer hide and pretend they don't have control of all their data, and it simplifies the process "right to be forgotten" directive, because companies now need to know where they store data and how to retrieve it (and therefore, delete it).

Cool, once in a while EU doesn't sucks.

That was already true, at least in the UK. Besides, it depends on the lawful basis under which you're processing data. I work in high court enforcement so we're processing data under legal obligation, meaning we won't erase any data held about you no matter how much you complain. We also don't have to give you anything except the basics (name, address, contact numbers) if you request it.

I've been nominated to ensure we're compliant, and by "we" I mean each of the few different companies my boss runs. It's a fucking nightmare.

>That was already true, at least in the UK
But not for companies such as Facebook I guess.

> I work in high court enforcement so we're processing data under legal obligation, meaning we won't erase any data held about you no matter how much you complain. We also don't have to give you anything except the basics (name, address, contact numbers) if you request it.
High court stuff is obviously different than what normal companies have on you. In most European countries, including my own, these records are by default public for all eternity unless there is some special consideration (such as victims' names in molestation cases etc.).

>I've been nominated to ensure we're compliant, and by "we" I mean each of the few different companies my boss runs. It's a fucking nightmare.
Well, this is good for the consumers so I have little sympathy.

Indeed, we've got overseas data processors and they have to be compliant too which I thought was interesting.

My manager is convinced that we can no longer accept personal data by email anymore, which may or may not be correct, I'm still torn. I mean on the one hand it makes sense, but most of our clients submit instruction forms and the like by email and surely a lot of other companies do this too? We can't force all our clients to use GPG. Do we have to set up some secure client site where they upload instruction forms so we ensure they're encrypted in transit? That would be a nightmare, although I wouldn't say no if my boss wanted to pay me a bonus to get it done.

There is so much panic in the company i work at because of this. I'm migrating our old data into a new system i helped develop and encrypting it all. There's also some people developing new routines to secure how personal data is used. There's also issues with email, like some user mentioned earlier.

>There is so much panic in the company i work at because of this.
But this regulation was a long time in making. Why there wasn't any sort of preparation?

>In short it means that you can request all information companies have about you, and these companies are required to give you everything they have.
Still ineffective when it comes to companies collecting "anonymized" data.

>Still ineffective when it comes to companies collecting "anonymized" data.
I'm not so into the details of the law, so you're probably right. But at least it is a giant step in the right direction, so I welcome it.

Not the guy you are responding to, but people are lazy bastards and don't react until the very last minute.

This. GDPR wasn't even mentioned at my workplace until last month.

The problem is with your company, not with the regulations

I work for an online gambling company and we've been working on this since about October of last year, maybe longer.

From quick glance it seems this set of regulation is made with centralized entities in mind. It assumes there is a singular entity which has the control of all the data and can for example delete it.

Fuck off facebook shill.

Sounds like you should read it in more detail

GDPR strengthens facebooks position, it's good for them. New competition is going to have much harder time collecting the same amount of data facebook has, it's like climbing up and pulling the ladder from everyone else.
Some have visioned open distributed network as competitor for facebook, now their legality is in question since if there is no central authority there is nobody who can comply with the requests made.

Swamp German here. The GDPR has reached the same level as the pope. However, I'm sceptical.
My main concern is: is the EU allowed to request personal information of users without a warrant? They have to gain access to the data to determine if it follows the regulations.

Which open distributed networks collect and process swathes of personal data?

>Swamp German
What?

Anyway, I'm pretty sure the governing bodies can't request the actual personal data without a case being brought forward, but I know they can request to see how you're documenting processing activities, including the categories of personal data you're processing.

>Which open distributed networks collect and process swathes of personal data?
For example irc servers, mastodon, bunch of online forums.

>Anyway, I'm pretty sure the governing bodies can't request the actual personal data without a case being brought forward, but I know they can request to see how you're documenting processing activities, including the categories of personal data you're processing.
My main concern is the EU being able to look into personal data without a warrant. Even if it's just to check how the company is processing the data.

discord, facebook, twitter, amazon and google cloud will be gdpr compliant from day 1 and not only that they have army of lawyers ready

irc, gnusocial, mastodon, openbazaar and ipfs will not be gdpr compliant

THANKS EU

> irc, gnusocial, mastodon, openbazaar and ipfs will not be gdpr compliant
So who are they gonna sue? It's not the users' fault if something is non-compliant so it will literally not affect anyone.

Actually made GDPR consultation my job for the foreseeable future and boy, am I making mad dosh with it. Medical professionals of all stripes are shitting their pants because of it.
The fines for minor infractions are existence-destroying as well.

Great shit.

>So who are they gonna sue?
Whoever runs the the server, instance or node.
On some truly distributed systems where users themselves store the data the users will be forced into gdpr compliancy.

Why? It holds companies accountable, and it isn't EU as a whole is it? I thought it was local governing bodies like the ICO here in the UK?

>Is it a good thing or a bad thing ?
It's another cookie law.

>cookie law
Just add personal data into each link on your site as a GET param and keep carrying it through each page.
Easy peasy, no cookies needy.

EU was (and still is) heaven compared to the corporate hellhole the US is.

If it's pushed by (((EUSSR))) it's a bad thing.

Attached: eussr.jpg (1920x1281, 36K)

so you dont currently protect your customer data in flight? wtf?

No.
I'd give my left hand to be able to move to south Dakota from Europe.

Why?

Just use local storage for fucks sake.

mama EU saving us again from sucking corpo-cocks

this time basically 'the right to be forgotten' gets stretched out to every single internet service running legally in EU

Cause Europe is shit and South Dakota is great

I wonder what loopholes corporations will find just to keep their precious data to themselves.

GDPR = How to destroy the European SaaS industry.

> On some truly distributed systems where users themselves store the data the users will be forced into gdpr compliancy.
Wait so you can't store data about yourself without being compliant anymore? Do I need to check all my files to see which ones have personal information to allow me to delete them upon request from myself?

Give me your reasons then.

because memelords at 4chink told me that Germany is an Islamic republic and blue eyed blond girls are being raped in broad daylight.

Bullshit, all those companies' business models depend on not being GDPR-compliant.

Its good on paper, lets see how its actually implemented after May this year. It means that in theory you can report any company spamming your inbox without your consent and gift them a saucy EU fine.

What?

Can I write a script that automatically forwards my entire spam folder to the police? That'd be ludicrous.

Does this mean that I will be able to dig up some bullshit forum from early 00s and, provided it still exists, demand them to erase all my past activity?

>Medical professionals of all stripes are shitting their pants because of it.

Good. You clearly have no idea how many breaches and data leaks have been there in the medical field.

>go get a prescription for erection/acne/whatever else embarassing
>medical company database breach
>all your info is out in the open

i hope gdpr will fucking nuke the shit out of this field

>If it's pushed by (((EUSSR))) it's a great thing.

ftfy

Attached: communist_european_union.jpg (467x350, 25K)

Yup, you totally can.

1. Send company a mail demanding that they give a full report on any and all personal data they have on you, including its usage

2. Demand they immediately delete this data

3. Forward complaint to the supervisory commission once it's clear they're being non-compliant

>Do I need to check all my files to see which ones have personal information to allow me to delete them upon request from myself?
no. previous user had no idea what hes talking about

many lulz will be had with this, what a time to be alive. spammers are the lowest scum of the scum and they need to be nuked.

>because memelords at 4chink told me that Germany is an Islamic republic and blue eyed blond girls are being raped in broad daylight.

oh boi

Again, *in theory* this would be possible, assuming you're an EU citizen and they have personal data like your real name. It doesnt matter if its a chinese or indian spammer, if you're an EU citizen and your data is being misused, they will go after em. If its only a nickname, then no. It's also not the police, there's a special channel for complaints regarding misuse of personal data. Large companies like Goodle and Facebook would have a DPO (Data Protection Officer) which is a person who's job is to make sure no data leaks happen.

The GDPR has what's called "the right to be forgotten" which is intended to get Google to remove any search results with your real name in case somebody tries to do an online smear campaign on you, or you make such a fool of yourself in a way that would make it difficult to find a job for example.

The US has something called PrivacyShield and it's analogous in the sense that if the company you're subitting personal data to is PrivacyShield compliant, it's automatically considered GDPR-compliant as well.

it's good but Jow Forums will obviously hate it because dude contrarian xDDD

Oh and forgot to mention - you also have the right to report shenanigans like agreements with very small printt or having a website auto-subscribe you to their newsletter by default when making an account.

nice try cia

I was just kidding bro.
Gonna keep those viagra spam mails around for when I'm old. You never know.

Can you ask state to provide all info they have on you and then ask to delet this?

No, states are exempt (police, courts, etc.) for obvious reasons.

Anyone know anything about the Sonic fiber internet service?

Not the state, but the companies and institutions that handle your data are obligated to respond to inquiries on what sort of data they collect about you. Like the way currently Google tracks you - you can always download a file with everything they keep on you and also there are options to enable or disable what you share (GPS History, Search History, Personalized Ads):

google.com/maps/timeline?pb
myactivity.google.com/myactivity
google.com/settings/ads/

...and so forth.

Microsoft people hated gdpr because they didn't want to go through the trouble of being compliant, but they've been preparing for years for it. Must be a good thing.

Nice try Ajit Pai. I live in France, I pay 5€ for 50gigs of 4G LTE and unlimited phone and texting. I don't even have to pay for home internet since 50gigs is far from enough for my needs

Clients complete PDF forms and email them to us. So... No? I guess?

Facebook is fucked, no matter what.

Regulations like this one hit exactly in their core business model. They will have to notify users about every lil detail they gather about them.

>I don't even have to pay for home internet since 50gigs is far from enough for my needs

H-how? Pic related is just one of my uTorrents on my PC. I don't even wanna know the numbers on my NAS.

Attached: uT.jpg (169x19, 7K)

if i delete my google activity will google be forced to actually delete it?

Doubt it. I doubt they'd even do anything if you made a formal request either.

but if the police ask them do they have to pretend they don't have it?

The police wouldn't ask them shit

how is data so cheap there?
That would cost over $250 p/m in australia
>inb4 shithole cuntry
>i know

If you're in the EU you have to request Google to delete all the data they have on you.

It's the "right to be forgotten" regulation.