Re:StreetLend.com shuts down, citing GDPR regulations
by pbowyer on Monday April 30, 2018 @05:24AM
(#16957054)
That's the nature of law. It's a set of principles, it's not black and white in the way techies want the world to be.
Painful when needing to implement? Absolutely (not my favourite either, I want definite answers). The way it is? Yes.
Re:StreetLend.com shuts down, citing GDPR regulations
by aeorgnoieang on Monday April 30, 2018 @10:35AM
(#16958838)
> That's the nature of law.
Not all laws, nor all legal systems, are equally vague. It would be really helpful if the regulations had been accompanied with a large set of 'example applications' demonstrating how EU members should be expected (or required) to implement the law in specific scenarios.
Uncertainty is a real cost too.
Re:StreetLend.com shuts down, citing GDPR regulations
by SaltySolomon on Monday April 30, 2018 @03:29AM
(#16956518)
DPO turns almost always into always in the EU because you got more than 10 people that work in HR or Work with Customers.
Re:StreetLend.com shuts down, citing GDPR regulations
by zerostar07 on Monday April 30, 2018 @01:55PM
(#16960738)
what happens if someone enters identifying information that you did not ask for, e.g. users who use their real name instead of (pseudonymous) username
Questions without answers in the GDPR:
* how to carry out a legitimate interest balancing test
* who is your lead regulator (do you have a lead regulator?)
* When do you need a DPO (large scale is left undefined, as is systematic)
* How reasonable will any particular regulator be towards inadvertent violations
* what precisely counts as the required technical and organizational measures in art24
* how do you define what is one purpose and what is two purposes?