richardk3000
Re:Presenting the Canvas Method for Information Security
on Tuesday April 11, 2023 @05:24AM (#35522723)
I’ve been invited to present the Canvas Method for Information Security to the We Hack Purple Community on May 16th!
More about the Method here: https://www.iso27diy.com
Re:Ask HN: Is using my personal information for scam a GDPR violation?
on Friday September 06, 2019 @03:09AM (#20893665)
Doesn't matter if they're from the EU or not. If you target (people in) the EU, the GDPR applies, no matter where you're from. Whether the GDPR can be effectively enforced is another question of course.
Re:Ask HN: What Compliances to Take Care of When Building a SaaS Product?
on Thursday February 21, 2019 @10:16AM (#19217365)
Kaka means poopoo (sh*t, but not that rude). Did you see my other comment, more to the point?
Re:ASP.NET Core; Blocking Users from the EU
on Thursday February 21, 2019 @07:37AM (#19216380)
Blocking users from the EU is a very drastic and in most cases very unnecessary measure to avoid GDPR trouble.
The GDPR was not designed to cripple honest businesses, and enforcement in the past 9 months certainly did not prove otherwise.
If anybody's interested in a more nuanced approach feel free to ask me any questions.
Re:Ask HN: What Compliances to Take Care of When Building a SaaS Product?
on Thursday February 21, 2019 @07:31AM (#19216355)
Btw are you from Belgium? There's a Flemish joke in your user name.
Re:Ask HN: What Compliances to Take Care of When Building a SaaS Product?
on Thursday February 21, 2019 @07:29AM (#19216340)
I'm working on a startup, GDPRvalet.io, currently in the phase of testing my assumptions.
Target audience is startup/scale-ups who need to comply with GDPR but don't have the money to hire lawyers (spoiler alert: in most cases you don't need any, certainly not in this phase of your company).
I'd like to ask you some questions to test my assumptions.
As a return favour I'd be happy to answer any questions about the practical implications of GDPR for your company – I've been working as a GDPR consultant for about 10 clients since 2017.
Re:Ask HN: GDPR, WordPress.com REST API and Gravatar
on Thursday January 10, 2019 @04:15AM (#18872561)
For new users, explaining this in the privacy policy and getting their consent is enough. It is wise to store the consent, for a user might complain that he/she never gave their OK, and then it's up to you to prove that they did.
If you already have a user base, you should inform them that you are changing your processing of their data, again they must consent. (you will probably have received those kind of mails or popups on websites during the last year yourself)
Important question: are you offering the service to individuals interacting directly with your service, or are you processing this data on behalf of a business client (the "controller")?