undefined | Better HN

0 pointsorf8y ago0 comments

Is it onerous because you are doing dodgy things with EU citizens data, because you don't take information security seriously or because you've fallen for some of the FUD around GDPR (having to hire a DPO, being fined 2 trillion dollars, etc etc)?

If it's too hard for you to copy paste a GDPR compliant privacy policy and monitor a GDPR email address then well, maybe you're in the wrong job.

0 comments

13 comments · 1 top-level

matte_black8y ago· 12 in thread

We do take security seriously and we're not doing anything dodgy.

We have business reasons for collecting user data, and users have no real reason to tell us to delete it at will, other than the fact that it makes them feel "creeped out".

The future is probably going to be super creepy. If you want to participate, get over it.

orfOP8y ago

So lets unpick this. You think you're not doing anything dodgy with your users personal information. However you feel that their information is your information and users have absolutely 'no real reason to tell us to delete it' (apart from, you know, it being their information). Then you top it off by taking a screeching right turn and saying 'future is going to be creepy ... get over it'.

Riiiight. You sound like the perfect person to be handing my personal information and I would trust you to take full care of it.

Not.

freedomben8y ago

I tend to agree with what you've said here, but there's a lot of unnecessary snark in your comment.

1 more reply

freeone30008y ago

It's not "their" information. It's information about them. I collected it and stored in my servers that I'm paying for, and that makes it my information. Your laws may say differently, but practicality wins here.

4 more replies

tlogan8y ago

Here is the thing: my email and personal info is mine. And if you are using my info to provide me your service that is also ok - I will rent that to you. And give you my CC#.

But if I do not use your service, then I want that you delete all my personal data. Why is that so hard?

ovao8y ago

But is knowledge of your email address yours? Do you expect to control all knowledge? What action do you take when someone accidentally CCs another party when they should’ve BCC’ed, and your address is leaked?

There are pieces of information that are particularly problematic for other parties to know. An email address is not one of those things.

1 more reply

Normal_gaussian8y ago

So we just have to believe you? With no effective recourse if you lie? no thanks.

Panoramix8y ago

-We're not doing anything dodgy.

-Other than the fact that it makes them feel "creeped out".

Pick one.

matte_black8y ago

Feeling creeped out doesn't mean someone is being dodgy.

1 more reply

amaccuish8y ago

And this is literally what GDPR was created for. Hoping you've blocked access to the EU so I don't happen across it :)

freedomben8y ago

It is genuinely fascinating to me how different people can feel about things. I get enraged when my "government" tells me what I can and can't do with my body/money/time. If I want to snort coke all day, what business of theirs is it as long as I'm not infringing on others' rights? Likewise, if I want to give my data to a super sketchy website, why shouldn't I be able to?

Obviously it's "safer" to let others make rules and force us inside the fence to keep us sheep away from the dangerous wolves out there. I do understand that perspective to some extent. However I would never trade my freedom for security. The former is not easy to regain.

3 more replies

austinheap8y ago

This is exactly what startups are worried about: inane threats from EU users.

matte_black8y ago

Good luck proving we're not in compliance.

j / k navigate · click thread line to collapse

0 comments

13 comments · 1 top-level

matte_black8y ago· 12 in thread

We do take security seriously and we're not doing anything dodgy.

We have business reasons for collecting user data, and users have no real reason to tell us to delete it at will, other than the fact that it makes them feel "creeped out".

The future is probably going to be super creepy. If you want to participate, get over it.

orfOP8y ago

Riiiight. You sound like the perfect person to be handing my personal information and I would trust you to take full care of it.

Not.

freedomben8y ago

I tend to agree with what you've said here, but there's a lot of unnecessary snark in your comment.

1 more reply

freeone30008y ago

4 more replies

tlogan8y ago

Here is the thing: my email and personal info is mine. And if you are using my info to provide me your service that is also ok - I will rent that to you. And give you my CC#.

But if I do not use your service, then I want that you delete all my personal data. Why is that so hard?

ovao8y ago

There are pieces of information that are particularly problematic for other parties to know. An email address is not one of those things.

1 more reply

Normal_gaussian8y ago

So we just have to believe you? With no effective recourse if you lie? no thanks.

Panoramix8y ago

-We're not doing anything dodgy.

-Other than the fact that it makes them feel "creeped out".

Pick one.

matte_black8y ago

Feeling creeped out doesn't mean someone is being dodgy.

1 more reply

amaccuish8y ago

And this is literally what GDPR was created for. Hoping you've blocked access to the EU so I don't happen across it :)

freedomben8y ago

3 more replies

austinheap8y ago

This is exactly what startups are worried about: inane threats from EU users.

matte_black8y ago

Good luck proving we're not in compliance.

j / k navigate · click thread line to collapse