GDPR is a good thing

Re:GDPR is a good thing by icebraining on Thursday September 28, 2017 @02:31PM (#15359634)

My question is more, what if you don't know it has personal data? Say you're just a generic document storage & sharing service, and someone uploads a generic PDF or Word, but which happens to contain personal data. Surely you're not expect to treat any possible data you receive as personal, just in case?

[ Parent | on HN ]

Re:GDPR is a good thing by mbrookes on Thursday September 28, 2017 @07:44PM (#15361703)

If you're providing a consumer storage service, and users are uploading their own data for personal use, this is outside the remit of GDPR.

If you're providing a storage service to a business that handles personal data, your a data processor, not a data controller.

If you're the data controller, you need a classification technology that can identify personal data in those documents (amongst other capabilities).

As always, there are exceptions, but that's the general rule.

[ Parent | on HN ]

Re:GDPR is a good thing by icebraining on Friday September 29, 2017 @11:21AM (#15366053)

Thanks!

[ Parent | on HN ]