News for hackers. Stuff that matters.

Thiebaut

The study covers the most recent documented data protection decisions from ten European authorities, up to 200 per country: 1,042 decisions, €833m in known fines, divided by each country's population.

Some core findings :

- Fines France: €9.58 per resident. Spain: €0.35. Greece €3.61, Germany €0.61. A 27x gap between top and bottom. - Five French decisions carry 89% of the French total. Google (€325m) and Shein (€150m) alone are 72%. The other 195 French decisions add up to €70m, median €11,000. - Two decisions against US Big Tech (Google, Amazon France Logistique) are 0.2% of the decisions and 41% of the money. Google's single fine is almost twice the known fines of the nine other countries combined. - The typical fine is small: median €7,200, and 529 of 965 known amounts are under €10,000. The 11 decisions at €10m or more carry 84% of all the money. - Cookie rules appear in 39 decisions but carry 65% of all the money.

What most fines are about (580 decisions with classified grounds): insufficient security (163), no valid legal basis (146), poor information to individuals (115), not cooperating with the authority (112), excessive collection or monitoring (91). Cookie rules appear in only 39 decisions but carry 65% of all the money.

As usual no?
It's a big issue for US startups that don't immediately build for GDPR compliance - however there's also a very simple solution that is to deploy on AWS and let AWS handle the heavy workload. Not every startup has the time to digest real compliance efforts that require experts - and implement the 2000 task list that's required, especially for enterprise who will look at that in big details - if you're into big headaches -> enjoy article 45 and next of the GDPR -> https://www.legiscope.com/blog/cross-border-data-transfers.h...
Few tools are as practical as google analytics for example, which requires cookies
it's insane !
Analysis of the economic and productivity losses caused by cookie banners in Europe, including country-specific estimates and legal insights into the outdated EU Directive 2002/58.
Re:ChatGPT Has a GDPR Problem on Sunday April 16, 2023 @06:59AM (#35588934)
You are very right. There’s a reason GDPR was adopted and that is to prevent harm to data subjects, or misuses of their data. At a deeper level it actually benefits everyone - including companies themeselves because it allows them to anticipate and eleminate problems before they happen. A good example is openai’s data breach. Had they implemented GDPR security precautions it would likely never have happened. They end up reacting by putting security measures in place, which is what gdpr requested in the first place… You end up implementing gdpr anyway…
Re:ChatGPT Has a GDPR Problem on Sunday April 16, 2023 @12:09AM (#35587198)
I wouldn’t say that. GDPR has the power to make LLMs much safer as it can reduce any risk of harm to data subjects. And that’s a very intended consequence !
Re: on Wednesday April 12, 2023 @02:05PM (#35544063)
A lot of prompts for finding good business ideas and validating the idea after.
It’s a very interesting idea, i haven’t tested the app, maybe integration with vscode ?
Unfortunately bagages losses are regulated - in europe - so compensation amounts are already limited (few 100, at best it compensate your suitcase). You need to take insurance and make a video before you pack as proof if you want a solution. Other than this you should assume all the time you luggage is lost.