Comment by nostalgeek | Hacker News Reader

Comment by nostalgeek | Hacker News Reader

The whole GDPR is an interesting phenomenon. Where I live we had this

https://www.cnil.fr/fr/loi-78-17-du-6-janvier-1978-modifiee

since 1978 and I didn't see anybody on HN panicking at the thought of doing business with french citizens, although these laws are tougher than GDPR. Remember than the latter is enforced at the country level, it's not Europe who is going to fine your business. Which means maybe Czechia will let you fly with whatever you are doing with personal data, and maybe Spain won't because they have tougher user data protection laws. My point is GDPR didn't create a new legal risk that wasn't there before. It's just that people here didn't care before for some reasons.

Now I see all these "GRPR compliant"(whatever that means) seals on different products, but where they even "CNIL compliant" before? Is that framework "CNIL compliant"? How many of you did a declaration to the CNIL before harvesting data from french citizens?

Maybe nobody cares because nobody got any fines maybe. This could be different with GDPR. Time will tell how hard they will enforce these rules, but it could be very harsh and very expensive for some people.

Agreed. GDPR replaces the current Directive and the various member state laws implementing it. GDPR's requirements are (making up a number) 80% or 90% already required by current laws. It's just that the fines were small. GDPR allows fines of up to 4% of annual revenue for the corporate group. So that's why it's getting so much attention. Large multinationals can't afford to ignore such a fine. The reality is probably that the enforcement authorities would only be able to hand out so many mult-million dollar fines (and fight the ensuing battle) at a time. We'll see what enforcement really looks like over time and that'll indicate how serious this is all taken.

It is companies like Cambridge Analytica, Google and others that caused this law change. In general the EU countries tries to leave the market to develop on it's own without interfering. However when there are a feeling that the market is doing the wrong thing, someone feels there needs to be a correction of ways and then we end up with things like this.

I'm sure someone once said "This is why we can't have nice things".

People got fined with the previous regime too, you can read in english about the fines levied by ICO in the UK, for example[0].

GDPR is scarier because the fines look higher and uniform across the EU, as far as I can tell.

[0] http://www.theregister.co.uk/2016/10/05/ico_finally_delivers...

Reply on news.ycombinator.com