The GDPR is incredibly easy to read, what are you on about?
5,046 karma · joined June 2, 2013
More than that - there needs to be a competent human in the loop.
Having some on-prem compute and some cloud compute is entirely viable.
Any data storage on the end user's device (cookies, local storage etc.) that is not strictly necessary to provide the service requires consent. So even basic and (relatively) privacy-friendly analytics cookies are covered by this.
When the new ePrivacy regulation is finally adopted[0] the rules will be relaxed a little to allow things like analytics cookies to be used without consent.
This is the full text of the law:
"Member States shall ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information, in accordance with Directive 95/46/EC,[1] inter alia, about the purposes of the processing. This shall not prevent any technical storage or access for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or as strictly necessary in order for the provider of an information society service explicitly requested by the subscriber or user to provide the service."
[0] it was originally going to be adopted in 2017/8 and come in to force a year or two later but that whole process has been a mess
[1] That's the Data Protection Directive, which has been repealed and replaced by the GDPR.
As a means to get to the airport from the city centre? Yeah, heavy rail is probably better.
But that's not the only reason for the line. It's used to get to and from other points on the route too.
The Airport line extension cost £368m with 15 stops over 14.5km of track (which shakes out at roughly £25m/km), and was completed more than a year ahead of schedule and under budget.
No, that's not what "web3" means. Web3 is all about the blockchain (or you can call it "distributed ledger technology" if you want to distance it from cryptocurrency scams).
There's nothing blockchain-y about Mastodon or the ActivityPub protocol.
So that's ~4%. It’s not insignificant, but I wouldn't exactly call it a primary revenue stream. VAT brings in 3x as much money. Import duties bring in about 5x that. And about half of the budget comes directly from the member states.
lol, lmao.
It's a US vs sensible countries thing.
And yes, they will take away domains if you don't continue to meet the requirements - it happened to me (thanks, Brexit).
The public domain is the set of all works in which no copyright subsists. Copyright automatically subsists in a work from its creation until it expires. Copyright is a property right. All property must have an owner.
Therefore a work cannot enter the public domain unless the copyright subsisting in it has expired.
(This is from the perspective of the law of England and Wales, at least. Other jurisdictions have similar legal axioms that produce the same result, though)
Subsection (3):
>A duty to operate a service using proportionate systems and processes designed to—
>(a) prevent children of any age from encountering, by means of the service, primary priority content that is harmful to children
Pornography is included in "primary priority content".
Subsection (4) then goes on to say
>The duty set out in subsection (3)(a) requires a provider to use age verification or age estimation (or both) to prevent children of any age from encountering primary priority content that is harmful to children which the provider identifies on the service.
Subsection (5):
>That requirement applies to a provider in relation to a particular kind of primary priority content that is harmful to children in every case except where—
>(a)a term of service indicates (in whatever words) that the presence of that kind of primary priority content that is harmful to children is prohibited on the service, and
>(b)that policy applies in relation to all users of the service.
Or, on other words, if there is the possibility of people posting anything that can be considered pornographic, you must implement strong age verification.
And it's also not only targeted services. Yes, Section 12 says only applies to services "likely to be accessed by children", but if you read Ofcom's guidance that is incredibly, ridiculously broad.
To quote from their "Children's access assessments guidance":
>Even if your service does not actively target children or seeks to limit access to children below a certain minimum age, it may still be of a kind likely to attract a significant number of children.
And some examples of content types from that document that suggests you might attract a significant number of children:
* Art, music, singing, photography, videography, drawing, painting, cooking, drama and acting, crafts, creative writing, beauty and makeup and fashion.
* Content about future careers and finance.
* Content about wellness, health and fitness
* Content enabling the development of new skills.
* Informal political commentary
If there is the possibility of people posting anything that can be considered pornographic you must implement strong age verification. And you might have to do that age verification every time somebody logs in - though Ofcom won't say where that threshold is.
Ofcom themselves has said that it is "a huge amount of work to come into compliance" (direct quote from a webinar earlier in the week).
There's a difference?
(I'm joking... but only half joking)
Yeah, that's nonsense. I've been running my own single-user instance since 2018 and server blocks by other instance administrators have never caused any problems for my use of the Fediverse.
I also follow a bunch of other people who run their own and never see any comments suggesting it's a problem for them either.