Silicon Valley is terrified of California’s privacy law

Re:Silicon Valley is terrified of California’s privacy law by andrewmutz on Thursday September 19, 2019 @05:35PM (#21020972)

These laws may be targeted at companies that deal in advertising data relating to consumers, but the laws as written affect all of us.

Are these the right laws to regulate SaaS companies that build business software? Should a consumer be allowed to request that data about them be deleted if that data are records of legitimate business transactions? If you buy a car from a dealership, do you "own" the data in their systems about your transaction and should you be able to request its deletion?

[ Parent | on HN ]

Re:Silicon Valley is terrified of California’s privacy law by biesnecker on Thursday September 19, 2019 @05:40PM (#21021008)

There are a bunch of exceptions to the requirement to delete user data in the law (full text: https://leginfo.legislature.ca.gov/faces/billTextClient.xhtm...), the exception for data that is collected "to enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business" would probably apply in the cases you cite.

[ Parent | on HN ]

Re:Silicon Valley is terrified of California’s privacy law by leesalminen on Thursday September 19, 2019 @05:38PM (#21020992)

Agreed. It’s been tough for us as well. We don’t monetize customer data in any way yet these regulations add real cost for us. We’re in the business software SaaS world as well, so it’s not really even our data to delete. We end up having to have a 3-way ticket between the business, the customer and us (the SaaS provider) and explain how we are deleting data from their system.

[ Parent | on HN ]