News for hackers. Stuff that matters.

A comment on Gitlab's Director of Risk and Global Compliance Resigns. Parent comment

Re:Gitlab's Director of Risk and Global Compliance Resigns by jka on Friday November 08, 2019 @03:07PM (#21486169)
Do you think it's possible that any potential liability could already have been exposed when the issue itself ( https://gitlab.com/gitlab-com/www-gitlab-com/issues/5555 ) was opened, prior to compliance becoming aware of it? It contains the statement:

"In e-group on Monday October 15, 2019 we took the decision to enable a "job family country-of-residence block" for team members who have access to customer data. This is at the expressed concern of several enterprise customers, and also what is becoming a common practice in our industry in the current geopolitical climate."

It could be that better legal scrutiny during contract negotiation might have prevented this becoming an engineering, hiring and compliance concern.

[ Parent | on HN ]
Re:Gitlab's Director of Risk and Global Compliance Resigns by angry_octet on Saturday November 09, 2019 @11:00AM (#21492245)
Your liability would be larger if you were known to have ignored qualified legal advice that it was risky.

Generally you don't read advice that says 'I believe doing X is illegal' because it doesn't get to that point.

I can't help but think there are other, quieter, lawyers involved.

[ Parent | on HN ]