Hacker News Reader

I wish the regulation around customers’ personal data caused companies to treat it like nuclear waste: strive to store the least amount humanly possible while allowing the business to function, and every executive team assuming that a serious incident under their watch probably means shareholders being wiped out and end of their company in its current form.

View on HN

You mean like GDPR?

No, not like GDPR.

There is mostly a motive for lots of CYA to reduce liability. Do some tickbox security to keep costs down if something goes wrong.

IN any case AFAIK most of the big fines are not for poor security, but for poor practices.

On the other hand GDPR imposes quite a cost burden on small organisations that hold limited data and thereby provides a competitive advantage to big business.

Reply on news.ycombinator.com