Re:Stripe Billing
by woolvalley on Friday April 06, 2018 @02:41PM
(#16776084)
Yes, because a minimum fine of $10 million for a 1 person business is totally reasonable, unless by the grace of the bureaucracy, they decide to give you a warning instead. /s
Also the GP post, there is more than 'avoiding collecting data'. If you have text field comments form and a 3rd party puts 'personal data' in that, then that is GDPR liable! You also need audit logs and and list of other requirements that needs multi engineer teams to implement properly.
As a result, most small businesses with email are probably not going to be properly compliant on some level and you can prosecute anyone. Just like the new-ish VAT laws, large stores are going to be compliant because they can afford it, while some petty bureaucrat will prosecute the small online shops instead.
Re:Stripe Billing
by true_religion on Friday April 06, 2018 @03:26PM
(#16776558)
The ten million is a maximum, not a minimum.
Re:Stripe Billing
by nothrabannosir on Friday April 06, 2018 @07:57PM
(#16778544)
“Whichever is higher” is a max(), not a min(), i.e. it’s a “minimum”
(counter-intuitively)
Re:Stripe Billing
by true_religion on Saturday April 07, 2018 @08:07AM
(#16780380)
I thought since they said a fine "up to X" it would mean that X was the upper boundary. So you could certainly be fined a lot less than $10 million.
Edit: had to verify. It seems a bit more reasonable: """Article 83 of the General Data Protection Regulation provides details of the administrative fines. There are two tiers of fines. The first is up to €10 million or 2% of annual global turnover of the previous year, whichever is higher. The second is up to €20 million or 4% of annual turnover of the previous year, whichever is higher.""" - https://www.gdpr.associates/what-is-gdpr/understanding-gdpr-...