I hope artificial meat will be introduced as a 'luxury' product and replace mass-produced fast food ground beef after it is well established as a genuine alternative and not some inferior knock-off like artificial cheese.
39 karma · joined April 11, 2018
I hope artificial meat will be introduced as a 'luxury' product and replace mass-produced fast food ground beef after it is well established as a genuine alternative and not some inferior knock-off like artificial cheese.
Regulations and fines are proven tools, and even if it doesn't make autonomous cars significantly safer, it will make them expensive enough to reduce fatalities.
This is false. There are multiple ways to justify processing of personal data, and your example would fall under data processing necessary to perform a contract at the customer's request. Depending on your location, there might also be legal requirements to record and keep user data, which is also a valid reason that doesn't require consent of the user.
The same could be said about executives and their lack of moral values. Except the C-level actually wields the power to control the company.
However uMatrix does not send agrees; in fact, it shreds most 'requests to consent' to pieces before relaying the page to the user as a side-effect of blocking third-party cookies+scripts. So unlike the cat proxy, uMatrix will never send a (deceitful) agreement back and the website owner never gets a reply for his inquiry.
All a website owner gets from a uMatrix user is the wrench they threw into the consent acquiring procedure, and I doubt that's enough to signify consent as defined in GDPR.
GDPR Art. 4 (11) https://gdpr-info.eu/art-4-gdpr/
‘consent’ of the data subject means any freely given,
specific, informed and unambiguous indication of the data
subject’s wishes by which he or she, by a statement or by a
clear affirmative action, signifies agreement to the
processing of personal data relating to him or her;GDPR Recital 32, sentence 3: "Silence, pre-ticked boxes or inactivity should not therefore constitute consent." https://gdpr-info.eu/recitals/no-32/
I'd be glad if you could point out a regulation on the content website owners must offer to people who do not wish their personal data to be processed.
If compliance is expensive, it's probably because your business profitted somehow from handling personal data (or you let someone else reap the profits, e.g. tracking ad networks).
I find your situation similar to the one of an engineer in a chemical plant who got the task to make the whole place completely ecofriendly due to new regulations. The solution to just block the EU and resume business elsewhere is the best course of action if complying is indeed impossible or infeasible for your business. If your organization decides to gamble because there is still profit to be made in the EU, it's on them when enforcement comes around someday.
In any case, competitors will find a way to offer GDPR-compliant services and there might be enough demand for data protection laws in the US, changing how businesses have to deal with personal data. Time will tell.
I agree with you that adding cheating to the cocktail of toxicity would probably not be significant enough to lose a large group of players. However cheating may yield a competitive advantage too large to be overlooked by the players.
As far as pre-ticked boxes are concerned, they do not signify consent [0], effectively taking the legal base [1] for processing PII in many cases. It's a bit more ambiguous in the actual law: "It shall be as easy to withdraw as to give consent." [2] If consenting can be as easy as clicking the "I agree, have my soul" button, withdrawing consent must not require clicking through dozens of checkboxes and should be just as easy.
[0] Recital 31, Sentence 3: "Silence, pre-ticked boxes or inactivity should not therefore constitute consent." https://gdpr-info.eu/recitals/no-32/
[1] Article 6 (1) "Processing shall be lawful only if [...]" https://gdpr-info.eu/art-6-gdpr/
[2] Article 7 (3) Sentence 4 https://gdpr-info.eu/art-7-gdpr/
Article 6 [0] is phrased negatively, making collecting PII illegal unless x or y. These points cover all the use cases the lawmakers deemed valid; a real-estate agent may collect PII because of 6.1b (taking steps to enter a contract at the request of the data subject). Should a new, possibly valid reason to collect PII come up it would first need to be checked and then added to the list.
Since most websites and online services do not aim to form a contract nor fit points c-f, they have to obtain consent by the data subject (6.1a) to make collecting PII legal.
You can also reduce the number of bikes needed by doing timed redistributions. Two people in the same appartment building, one leaves for work around 7 while the other leaves around 9, can share a bike if someone brings it from the nearest subway station to the local bike station at 8.