News for hackers. Stuff that matters.
Re:Ask HN: How do you GDPR for your small side projects? by Obi_Juan_Kenobi on Monday April 30, 2018 @02:32PM (#16961024)
Can someone clarify what exactly is the legal liability that comes from GDPR?

My very basic understanding is that countries set up SAs (supervisory authorities) to deal with complaints, and have the legal power to sanction and so forth.

So is it only the SA that can take action against you? If someone wanted to harass you, must they complain through the SA, or can they bring a civil suit based on the GDPR?

Re:Ask HN: How do you GDPR for your small side projects? by spiralx on Wednesday May 02, 2018 @06:47AM (#16975699)
> So is it only the SA that can take action against you?

Yes.

> If someone wanted to harass you, must they complain through the SA, ...

Yes. There are also provisions for handling malicious requests to access personal data:

https://ico.org.uk/for-organisations/guide-to-the-general-da...

> ... or can they bring a civil suit based on the GDPR?

Nope.