News for hackers. Stuff that matters.
Re:TikTok fined €345M for breaking EU data law on children’s... by FirmwareBurner on Friday September 15, 2023 @09:52AM (#37522971)
It does get enforced against European companies, they just don't make HN headlines because they're not big-tech so nobody here would have heard of them.

Also EU companies tend to be more mindful and take data protection very seriously, even before GDPR was a thing, so finding gross offenders is a rare occurrence anyway.

Re:TikTok fined €345M for breaking EU data law on children’s... by wincy on Friday September 15, 2023 @09:55AM (#37523014)
Isn’t SAP absolutely massive? Surely they count as big tech.

Edit: for anyone wondering SAP has ~110,000 employees worldwide, Google has ~180,000, so comparably mega scale tech company.

Re:TikTok fined €345M for breaking EU data law on children’s... by izietto on Friday September 15, 2023 @10:00AM (#37523071)
SAP isn't a social platform, it isn't even B2C, so they don't really relate to GDPR
Re:TikTok fined €345M for breaking EU data law on children’s... by esarbe on Friday September 15, 2023 @10:20AM (#37523365)
The GDPR applies to all companies, social network platforms or not. It's not even about the internet in particular, it's about how companies can store and process private information of EU citizens.
Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @10:29AM (#37523554)
SAP is B2B, the vast majoritybof personal data is professional (supplier and customer business contacts) and emoloyee data (payroll and such). Not much to fine here. Also, since SAP as a company isn't handling any of that data, SAP isn't really affected.
Re:TikTok fined €345M for breaking EU data law on children’s... by generic92034 on Friday September 15, 2023 @11:06AM (#37524207)
> Also, since SAP as a company isn't handling any of that data, SAP isn't really affected.

I am not sure that is completely correct, considering SAP's cloud offerings.

Re:TikTok fined €345M for breaking EU data law on children’s... by throwaway74902 on Friday September 15, 2023 @11:28AM (#37524521)
If I run my app on Azure, is Microsoft responsible for me breaking GDPR?

SAP runs your instance, but isn't responsible for what you do with it.

Re:TikTok fined €345M for breaking EU data law on children’s... by adra on Friday September 15, 2023 @01:03PM (#37526100)
If they're deemed a data processors then yes in fact they do need to care about the application of the laws. SAP has user management at least in terms of companys' own users which will likely have PII.
Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @01:55PM (#37526782)
The personal data handled by SAP, the ERP system not the company, is very well compartementalized and accessible only need-to-know. Assuming proper user rights policies and roles are in place, but that is on SAPs client, amd not SAP themselves.
Re:TikTok fined €345M for breaking EU data law on children’s... by generic92034 on Friday September 15, 2023 @02:02PM (#37526892)
Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @11:11AM (#37524278)
With EU based servers? Sure, GDPR applies. But so far I didn't hear anything about SAP not being compliant.
Re:TikTok fined €345M for breaking EU data law on children’s... by generic92034 on Friday September 15, 2023 @02:05PM (#37526942)
That is correct, as far as I know. I was just objecting to SAP not being responsible for any PII data of their customers, in all cases.
Re:TikTok fined €345M for breaking EU data law on children’s... by latortuga on Friday September 15, 2023 @03:04PM (#37527755)
I don't think the location of servers is relevant to GDPR. It's about storing and processing data of citizens of any EU member country.
Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @03:34PM (#37528121)
Server location matters a lot.
Re:TikTok fined €345M for breaking EU data law on children’s... by rsynnott on Friday September 15, 2023 @10:30AM (#37523586)
Sure, but SAP's business model doesn't depend on doing as much privacy violation as they can get away with (this is basically the business model of all adtech) so they're far less likely to fall afoul of the GDPR. The main risk to a company like SAP would be _accidentally_ falling afoul of the law; this tends to happen where companies are grossly negligent in their handling of personal data, and this is then exposed in a major leak.
Re:TikTok fined €345M for breaking EU data law on children’s... by esarbe on Friday September 15, 2023 @11:22AM (#37524437)
You are absolutely correct with this.

I'm absolutely in favor of making it impossible for adtech to make any profit at all as long as they build their business on monetizing user data and exposing their users to all kinds of hazards.

I find it funny that so few people here see a problem with that kind of behavior. It's as if they expect society to serve the market, instead of the other way around.

Re:TikTok fined €345M for breaking EU data law on children’s... by generic92034 on Friday September 15, 2023 @03:36PM (#37528140)
Temporarily embarrassed millionaires or not yet exploded adtech unicorns, the same mindset. ;)
Re:TikTok fined €345M for breaking EU data law on children’s... by FirmwareBurner on Friday September 15, 2023 @10:02AM (#37523101)
When did SAP breach GDPR?
Re:TikTok fined €345M for breaking EU data law on children’s... by mymac on Friday September 15, 2023 @12:26PM (#37525545)
If you are aware of SAP breaking the GDPR and it's being swept under the carpet or if enforcement is lackluster given the scope of the problem then please supply some evidence. That SAP is large doesn't matter, what matters is if they are breaking the law.
Re:TikTok fined €345M for breaking EU data law on children’s... by TeMPOraL on Saturday September 16, 2023 @04:49AM (#37533120)
SAP is the company you go to to help you with potentially GDPR-affected processing. It would be quite a thing if they were doing any kind of non-accidental violation of GDPR.
Re:TikTok fined €345M for breaking EU data law on children’s... by personomas on Friday September 15, 2023 @09:55AM (#37523013)
Which ones?
Re:TikTok fined €345M for breaking EU data law on children’s... by _puk on Friday September 15, 2023 @10:24AM (#37523455)
https://www.enforcementtracker.com/

Ironically, currently 2023 entries.

Re:TikTok fined €345M for breaking EU data law on children’s... by personomas on Friday September 15, 2023 @10:26AM (#37523485)
No. These are all fines. We're talking about which ones only belong to EU countries (companies that were founded or headquartered in the EU).
Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @10:30AM (#37523578)
Headquarted countries founded in the EU? Please, tell me more, I always wanted my own nationstate!
Re:TikTok fined €345M for breaking EU data law on children’s... by personomas on Friday September 15, 2023 @10:35AM (#37523654)
Obviously I meant to write "companies" not countries. (fixed.)
Re:TikTok fined €345M for breaking EU data law on children’s... by cccbbbaaa on Friday September 15, 2023 @10:58AM (#37524065)
France against french companies: 40M€ for Criteo, 1M€ for Total, 1M+€ for AG2R, 2M€ and 800000€ for Carrefour, 600000€ for EDF, same for Accor, two 300000€ fines for Free, 125000€ for CityScoot, 500000€ for Brico Privé, 400000€ for the RATP. Perhaps others, didn't bother to check any further.
Re:TikTok fined €345M for breaking EU data law on children’s... by personomas on Friday September 15, 2023 @11:03AM (#37524149)
Good research. I don't know those cases. I am sure EU and France included exhibits a certain amount of fairness to all companies regardless if they're EU or not, but their definitely at least a little bias to non-EU companies. This isn't however a serious complaint of mine, I'm just acknowledging that it exists. The authoritarianism and the insanity of the laws in the first place is/are a far bigger problem, and in general the arrogance of politicians.
Re:TikTok fined €345M for breaking EU data law on children’s... by interactivecode on Friday September 15, 2023 @11:47AM (#37524860)
So you haven't researched the actual fines and warnings the EU gave out to EU and non-EU companies. but you just feel like the vibes are totally off?

I was really expecting better comments from hackernews. If we're talking about vibes you should acknowledge that it makes sense for the EU to protect their people and their personal information from really large foreign companies. Even more so from companies that are aligned with the state that has one of the largest military powers in the world.

Re:TikTok fined €345M for breaking EU data law on children’s... by Timon3 on Friday September 15, 2023 @12:17PM (#37525386)
> I was really expecting better comments from hackernews.

You really shouldn't on topics related to the EU. There is an incredible amount of misinformation peddled, and asking for sources or actual analysis beyond simple statements that keep being repeated is usually met with either silence or insults.

Re:TikTok fined €345M for breaking EU data law on children’s... by cccbbbaaa on Friday September 15, 2023 @12:18PM (#37525401)
>Good research

No. All I did was opening enforcement tracker, click on France, and look for familiar names. It was faster than writing my previous comment. I knew about one of the Carrefour cases, and the Criteo case though.

>The authoritarianism and the insanity of the laws in the first place is/are a far bigger problem

What is authoritarian or insane in GDPR? Or its previous iteration, the DPD (from 1995)? Oh no, we expect companies to handle personal data with care, the horror.

Re:TikTok fined €345M for breaking EU data law on children’s... by jeroenhd on Friday September 15, 2023 @12:05PM (#37525173)
The Netherlands DPA has fined CP&A, an unnamed orthodontic clinic, Transavia, a local political party, the municipality of Enschede, Booking.com B.V. (yes, Booking.com is Dutch), OLVG (a hospital), a redacted data trader, the Dutch national tennis association, an insurance company, another hospital, a semi-governmental organisation and 7 governmental bodies.

Some of these do business in foreign countries, but all of them are unmistakably Dutch.

I've left out the largest news organisation in the Netherlands, the Belgian company BPG Media, but they have bought up a bunch of local news organisations.

Non-EU-originating companies on the list: - Tiktok - locatefamily.com

Tiktok got fined by the Dutch DPA for not providing their privacy statement in Dutch while still doing business in the Netherlands. Further research into Tiktok was transferred to the Irish DPA (this fine). I suppose the Dutch DPA could've lodged a complaint with the Irish DPA for not providing the necessary documents in Dutch, but that seems rather silly to me.

locatefamily.com did not have EU representation at all so there was no need to process the complaint anywhere else. I doubt the fine will ever be collected, but who knows, maybe the owners are stupid enough to open a business in Europe somewhere down the line.

Re:TikTok fined €345M for breaking EU data law on children’s... by personomas on Friday September 15, 2023 @12:41PM (#37525769)
That's interesting but it doesn't provide a comprehensive overview to have much meaning. Tidbits of facts. Ok. Nice. But how much were the fines, for what reasons, etc?
Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @12:42PM (#37525794)
Just stop trolling...