Re:StreetLend.com shuts down, citing GDPR regulations
by rorykoehler on Monday April 30, 2018 @05:19AM
(#16957031)
I think being responsible for negligence in security practices and GDPR are not the same. GDPR is overreach. There is a saner middle ground, for example in Australia new laws coming in mean executives can go to prison for the negligence in your example. That makes more sense as it doesn't invalidate 90% of standard tools processes in technical marketing for example.
Re:StreetLend.com shuts down, citing GDPR regulations
by IanCal on Monday April 30, 2018 @09:00AM
(#16958187)
I think it's interesting you find a fine to be overreach but imprisonment not.
> That makes more sense as it doesn't invalidate 90% of standard tools processes in technical marketing for example.
Can you explain in more detail?
Re:StreetLend.com shuts down, citing GDPR regulations
by rorykoehler on Tuesday May 01, 2018 @09:34AM
(#16966892)
I'm not talking about the fine/prison. The overreach is that they dictate how you have to handle data. In Australia you are only obligied not to get hacked and are trusted to figure it out for yourself. In Europe they have all this right to be forgotten BS and reams of compulsory opt ins etc etc
Re:StreetLend.com shuts down, citing GDPR regulations
by IanCal on Thursday May 03, 2018 @02:00AM
(#16983666)
I don't really have a problem with requiring consent to work with personal data. Right to be forgotten is restricted and I can't think of obvious cases within the restrictions here: https://ico.org.uk/for-organisations/guide-to-the-general-da... that I disagree with.
Stronger restrictions on what data you can hold without good reason or consent means that inevitable breaches become less important.
TalkTalk lost 150k peoples information (including bank account numbers, sort codes, dates of birth, etc - people who later then received scam phone calls with people who knew their details) due to extremely basic security failings. They were fined £400k (a record fine). They then did it again and paid £100k.
Properly securing the site and the data over many years could easily cost more than that, added to the chance you'll not get hacked or fined and it is perhaps even a financially sensible position to not put the effort in.