Popcorn time
I shall be watching this with great interest.
Streaming services aren't complying with EU data protection law - namely the General Data Protection Regulation's right of access - according to a fresh suite of complaints aimed at the likes of Netflix, Amazon and Spotify. Safe Harbor destroyer Max Schrems' privacy group NOYB (for None Of Your Business) today announced it had …
To be fair, similar legislation is probably coming in the USA sooner or later, depending on when the relevant senators / congress representatives* get their act together (I know at least one senator has proposed something similar to GDPR in the last few weeks)
* not sure if this is the right term?
> similar legislation is probably coming in the USA
Hm. I'd expect it to be watered down to the point of uselessness, and nowhere near the potential teeth of GDPR. Only California has the fortitude to actually do something useful, and that's usually hit-and-miss as well.
I have a gut feeling that the proposed "similar to GDPR" bill is going to be silently tabled.
I have a gut feeling that the proposed "similar to GDPR" bill is going to be silently tabled.
Barring some sort of digital disaster that moves our legislators to action, I wouldn't expect significant privacy legislation in the US before 2021-2022 at the soonest. The self-immolation of the Republican Party assisted by the Democrats enthusiastic Molotov cocktail bombardment will probably paralyze the government this year and the 2020 election will do the same next. Privacy is a complex issue. If our legislators can figure out that they actually have to think (for a change) before passing privacy laws, it'll take a few years to get a law passed and placed on the President's desk for signature.
I don't see them being shutdown, if they don't comply with the law they will simply be fined. Shutting down would only happen if they don't pay their fines, keep re-offending and things escalate to criminal legal proceedings.
We are a very long way from that and very few businesses would want to miss 500 million of the wealthiest customers in the world.
That is a good oversimplification, w are both and the product to costumer radio depends on the company. For example Netflix has paying costumers and isn't primarily selling your data, and probably does so mostly to sell you more stuff themselves. YouTube on the other hand has you mostly as a product, but selling wealthy customers is better than poor ones cause they're selling you're data (well, add space targeted to a demographic in Google's case) to people that want it so they can sell you stuff.
GDPR is a European law, that the USA will be very keen for the UK to drop if we want any kind of deal.
Mind you, our own paranoid snooping governments won't be sad to see it go either.
As for the specific comment, well, it's a response to the comment that businesses wouldn't want to lose out on a 500 million audience.. Try telling the brexiters that!
The internet has been around long enough now, that it wouldn't be such a hard task to cobble together a standardised agreement that would suffice for all but the most divisive of organisations. Even then, the more sinister companies could be forced to frame their terms and conditions in relation to the standard, and explicitly state where the two diverge.
Any use of obfuscating legalese in bespoke conditions would automatically render the whole contract null and void.
The result would be that customers could be safe in the knowledge that signing a standard contract would not have their mouth sewn into another users arse, because they didn't read the 157th page of the t&c's they were signing. (thank you South Park for the image that just won't go away)
They are ignoring their DPO as well.....
While its legal to do so, it requires an organisation to fully justify why.
Surprised that this hasn't been bought up yet.
the DPO is involved, closely and in a timely manner, in all data protection matters;
the DPO reports to the highest management level of your organization, i.e. the board;
What a waste of good coffee, could I have another another keyboard please?
I just searched the intranet of the Company I work for (a European company with 100,000+ employees) for the key words "Data Protection Officer" and got zero matches. We ain't got no stinkin DPO!
The last time I dealt with a DPO was when I tried to resolve an issue with a telecom's company who claimed I had extended a contract over the phone and wanted to charge me early termination fees. The Data Protection Office had one single employee who was off on extended leave. (The temporary secretary who was covering for him told me that she probably shouldn't say, but that she thought it was stress related).