News for hackers. Stuff that matters.
Re:Data portability, the forgotten right of GDPR by golergka on Tuesday May 25, 2021 @10:04AM (#27276886)
> Because you're a good person and care about providing value to your users, and not just extracting value from them.

That's a false dichotomy that is also misrepresents the nature of a typical business transaction.

If you're a good person and a business owner, you're looking to make mutually beneficial business transactions. If someone is looking to move away from using your business, then it's them who's trying to extract value from you, without giving anything in return.

Of course, sometimes, as just a good person, you want to do good for other people without anything in return — but you can do it as a private person, putting your profits into charity funds. Separation of concerns is a good thing that make things clear. Also, from any moral point of view, money spent on engineer salary that allows some food app user to migrate to a competitor is probably not spent as well as feeding hungry or providing health care to sick anyway.

Re:Data portability, the forgotten right of GDPR by TeMPOraL on Tuesday May 25, 2021 @10:23AM (#27277125)
> If you're a good person and a business owner, you're looking to make mutually beneficial business transactions.

Exactly this. The transactions become much less mutually beneficial if the business is trying to hold my data hostage. Especially if they gave no indication of it previously, back when I was still evaluating the value of the transaction.

We had a good time, I got value from their services, they got my money and perhaps some extra benefits too - now it's time for us to part ways, I'm packing and I want my stuff back.

> If someone is looking to move away from using your business, then it's them who's trying to extract value from you, without giving anything in return.

Transactions on the market are supposed to be voluntary. This means I should be free to move away from using any business, after discharging all my obligations to it that I voluntarily accepted. By switching to a competitor, I'm not taking any more value from the company. As for asking for my data back, a business should consider my data loaned to them. It's their obligation - social, and now legal - to give it back.

GDPR specifies more than one way to do this. Controller to Subject transfers are a no-brainer. It's my data, I want it back. Controller to Controller transfers are gated by "where technically feasible". This point is there to ensure that businesses which don't have the necessary infrastructure in place aren't forced to spend time and effort to build it up. Only those that can do it at negligible costs are being forced to provide this option.

Re:Data portability, the forgotten right of GDPR by jrochkind1 on Tuesday May 25, 2021 @02:55PM (#27280805)
golergka's daycare service: you can check your kids in, but you can never check them out. it just wouldn't be mutually beneficial, sorry.
Re:Data portability, the forgotten right of GDPR by colejohnson66 on Tuesday May 25, 2021 @11:11PM (#27285776)
If you went with a hotel service, you could’ve made a Hotel California reference ;)