News for hackers. Stuff that matters.
Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by Someone1234 on Wednesday May 30, 2018 @11:09AM (#17188269)
It is a guaranteed right enshrined in the EU's Constitution[0] (Charter of Fundamental Rights of the European Union[1]). Specifically Title II Freedoms: privacy, protection of personal data.

That's like claiming the 1st Amendment in the US is just a "magic right."

[0] https://en.wikipedia.org/wiki/Treaty_establishing_a_Constitu... [1] https://en.wikipedia.org/wiki/Charter_of_Fundamental_Rights_...

Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by wooter on Wednesday May 30, 2018 @11:13AM (#17188295)
interesting that hardly any eu governments respect that right
Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by epicmellon on Wednesday May 30, 2018 @11:11AM (#17188283)
See above my comment about practicality. It takes no effort for me to not violate your first amendment rights. It's a negative right, not a positive right.
Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by OskarS on Wednesday May 30, 2018 @11:31AM (#17188495)
There are plenty of rights that aren't "practical". The right to vote is a HUGE pain in the ass, you have to organize massive elections. Property rights means you have to have huge police forces. The right to protest comes with enormous practical difficulties. The right to education means that you have to have expensive public school systems. The right to an attorney in a criminal trial means that the court has to provide one, at some expense. All of these are "rights", in all modern free countries, and they are all "magical rights created by law". That's what a right IS.

You're making the wrong argument. You're saying "this is not a right that can logically exist", which is nonsensical. Of course it can. What you should be arguing is "this right is far too burdensome on society and should not have been passed". I personally disagree with that, but it's at least a valid argument.

Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by Someone1234 on Wednesday May 30, 2018 @11:13AM (#17188298)
It takes no effort for you not to violate Title II, just don't ask for other people's personal information.
Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by jimmaswell on Wednesday May 30, 2018 @11:34AM (#17188524)
It takes effort to set up server access log rotation. It takes effort for a non-technical person to make sure their wordpress installation isn't storing cookies or logs.
Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by Someone1234 on Wednesday May 30, 2018 @11:35AM (#17188534)
The GDPR doesn't require any of that. All you need to do is show a legitimate need to store data if challenged, and access logs have a legitimate purpose (diagnostic and abuse monitoring).

Larger businesses (250 employees or more) may need a privacy policy though.

Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by jimmaswell on Wednesday May 30, 2018 @11:44AM (#17188628)
The consensus I've seen has been that you can't keep around server logs, especially not forever, just for abuse monitoring. GDPR considers IPs PII.
Re:USA needs law 'a lot like GDPR' says Salesforce CEO Marc ... by Someone1234 on Wednesday May 30, 2018 @12:15PM (#17188957)
A "consensus" reached by a bunch of programmers who haven't even read the law has no merit in this discussion. What's clear is that GDPR prohibits using IP addresses to target content at particular individuals. But we aren't talking about that, we're talking about generic access logs.

For example the law itself says: The processing of personal data strictly necessary for the purposes of preventing fraud also constitutes a legitimate interest of the data controller concerned.

The UK's IPO for one example definitely doesn't agree with your assessment of the GDPR and it is their job to help companies adhere to it.