At Carbn, we're working to give developers a way to solve GDPR with code vs. a legal paper exercise. Basically, privacy-by-design for your existing infrastructure and automated privacy office. Would love to hear feedback!
3 karma · joined August 13, 2011
@filsoutherland
Verifying my Blockstack ID is secured with the address 112mTQCvh7BU8g4bgpdqsiJvPk2cAqth2s https://explorer.blockstack.org/address/112mTQCvh7BU8g4bgpdqsiJvPk2cAqth2s
"You agreed to let us do this. We gave you notice of our privacy practices, and you consented."
The EU regards privacy as a right and the recently passed General Data Protection Rule (GDPR) enforces this right for EU citizens worldwide. US companies are slow to realize this and there will be a flood of litigation from Europe against US companies that service EU citizens when this law takes effect in 2018. GDPR implements many of the concepts of VRM and has the stated objective of putting users in charge of their widely-defined personal information. Consent has to be explicit and opt-in prior to collection, so IoT companies would have to make sure that they either differentiated EU citizens and required consent prior to capture or implement standardized policies that respect GDPR across the board.
My thinking is that the disruptive companies of tomorrow will have user trust and personal data collection transparency as a key differentiator. The problem is that the technology to enable this easily isn't there yet. Privacy and personal data management are complex and remain the domain of health companies subject to HIPAA and European privacy wonks. My team is working on a platform to bring easy and transparent personal data management (including consent) to all services that collect personal information. Check it out - www.carbn.io