TikTok fined €345M for breaking EU data law on children’s accounts

Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @10:29AM (#37523554)

SAP is B2B, the vast majoritybof personal data is professional (supplier and customer business contacts) and emoloyee data (payroll and such). Not much to fine here. Also, since SAP as a company isn't handling any of that data, SAP isn't really affected.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by generic92034 on Friday September 15, 2023 @11:06AM (#37524207)

> Also, since SAP as a company isn't handling any of that data, SAP isn't really affected.

I am not sure that is completely correct, considering SAP's cloud offerings.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by throwaway74902 on Friday September 15, 2023 @11:28AM (#37524521)

If I run my app on Azure, is Microsoft responsible for me breaking GDPR?

SAP runs your instance, but isn't responsible for what you do with it.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by adra on Friday September 15, 2023 @01:03PM (#37526100)

If they're deemed a data processors then yes in fact they do need to care about the application of the laws. SAP has user management at least in terms of companys' own users which will likely have PII.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @01:55PM (#37526782)

The personal data handled by SAP, the ERP system not the company, is very well compartementalized and accessible only need-to-know. Assuming proper user rights policies and roles are in place, but that is on SAPs client, amd not SAP themselves.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by generic92034 on Friday September 15, 2023 @02:02PM (#37526892)

https://www.sap.com/about/trust-center/data-privacy.html#act...

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @11:11AM (#37524278)

With EU based servers? Sure, GDPR applies. But so far I didn't hear anything about SAP not being compliant.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by generic92034 on Friday September 15, 2023 @02:05PM (#37526942)

That is correct, as far as I know. I was just objecting to SAP not being responsible for any PII data of their customers, in all cases.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by latortuga on Friday September 15, 2023 @03:04PM (#37527755)

I don't think the location of servers is relevant to GDPR. It's about storing and processing data of citizens of any EU member country.

[ Parent | on HN ]

Re:TikTok fined €345M for breaking EU data law on children’s... by hef19898 on Friday September 15, 2023 @03:34PM (#37528121)

Server location matters a lot.

[ Parent | on HN ]