News for hackers. Stuff that matters.
Re:GDPR for lazy people: Block all European users with Cloud... by orwin on Friday May 25, 2018 @04:48PM (#17157826)
And if IP is the only PII you keep and if you destroy IP logs after let's say 6 month and write something about that in your TOS, you're good. And even if you're not, if hey contact you and are not happy with your way of handling data, they will warn you then offer solution.

You can even self-report if you're not sure you handled the privacy well, and they will point you the stuff you have to work on (and give you month to do that).

I Understand Americans are afraid of fine and lawsuits, but please don't be afraid. Read GDPR statement from regulatory instances, they are here to help business too.

Re:GDPR for lazy people: Block all European users with Cloud... by ericb on Friday May 25, 2018 @11:24PM (#17160015)
> I Understand Americans are afraid of fine and lawsuits, but please don't be afraid.

I think GDPR is short-sighted from a game theory perspective and will short-change European citizens.

When I sold software online, Europe was < 5% of my sales. Why take on business-ending liability risk for that amount of sales? Sure, maybe I'd do these things anyway, but once you open that pandora's box, you're relying on favorable interpretation and the goodwill of regulators.

Having seen what happened in the US with civil asset forfeiture, well-meaning laws can have their purpose bent, and goodwill can be perverted. Why take on that exposure?