Yahoo Triples Estimate of Breached Accounts to 3B

Re:Yahoo Triples Estimate of Breached Accounts to 3B by pilsetnieks on Tuesday October 03, 2017 @06:37PM (#15396794)

I was about to mention the GDPR - it definitely is a step in the right direction. I don't think that it doesn't go far enough - compared to previous regulations, it is quite severe, and it already is a pain to implement as it is. If it went any further, many companies would probably not even bother and somehow do their business outside the EU, or just prepare to be fined

> if they do store additional info, and their servers are breached, then automatic hefty fines should be paid (right after the mandatory notification to authorities and the public).

This is already in the GDPR - you have to notify everyone affected about breaches, and the fines can go up to 20 million or 4% of annual turnover, whichever is greater.

[ Parent | on HN ]

Re:Yahoo Triples Estimate of Breached Accounts to 3B by dx034 on Wednesday October 04, 2017 @04:34AM (#15399043)

GDPR already does more than any existing law in either US or Europe (not sure about other countries). As every law it will be reviewed and can be made stricter. Changes are likely needed anyway as companies try to circumvent the directive with "creative" ways or incentives for users to give up privacy.

But it's a huge step forward compared to the existing situation.

[ Parent | on HN ]