News for hackers. Stuff that matters.

A comment on Silicon Valley is terrified of California’s privacy law. Parent comment

Re:Silicon Valley is terrified of California’s privacy law by jjuhl on Thursday September 19, 2019 @03:51PM (#21019985)
Just don't do stupid privacy violating shit and you'll be fine anywhere.

Collect no information. Share no information. You are good - everywhere. And that really ought to be the default behaviour..

[ Parent | on HN ]
Re:Silicon Valley is terrified of California’s privacy law by fragmede on Thursday September 19, 2019 @04:09PM (#21020192)
I'm not sure how ecommerce works without some information from the user, such as what they're trying to purchase, the quantity, a shipping address, and some form of payment, most likely a credit card.
[ Parent | on HN ]
Re:Silicon Valley is terrified of California’s privacy law by morganherlocker on Thursday September 19, 2019 @04:41PM (#21020537)
... and if you plan to handle this type of highly sensitive data, you should be prepared to provide some basic levels of compliance, including appropriate auditing of sensitive data along with informed consent from users.
[ Parent | on HN ]
Re:Silicon Valley is terrified of California’s privacy law by opportune on Thursday September 19, 2019 @04:22PM (#21020335)
How are you supposed to do any business over the internet without collecting information?
[ Parent | on HN ]
Re:Silicon Valley is terrified of California’s privacy law by GreenJelloShot on Thursday September 19, 2019 @03:52PM (#21020003)
That is what they said about GDPR...
[ Parent | on HN ]
Re:Silicon Valley is terrified of California’s privacy law by jjuhl on Thursday September 19, 2019 @03:56PM (#21020042)
And what is your problem complying with that if you collect no information nor share any information?
[ Parent | on HN ]
Re:Silicon Valley is terrified of California’s privacy law by vonmoltke on Thursday September 19, 2019 @05:36PM (#21020974)
The main issue is proving compliance. Any website could, in theory, be recording information that counts as "personal data" under GDPR and CCPA without the user realizing it. What happens if a user doesn't believe you when you say you don't store or share anything? How do you prove to a regulator that you actually don't?
[ Parent | on HN ]