GDPR isn't even that brutal in terms of data regulations. It makes you wonder what American companies are collecting that makes it so hard for them to be compliant.
https://twitter.com/DebbieKennett/status/1478350388050817026
GDPR basically says data that is personally identifiable (can be used to say who you are in real life) belongs to you.
Companies must have your consent or legal justification to use or transfer your personal data. You can withdraw that consent at any time.
Companies must have your consent or legal justification to use or transfer your personal data. You can withdraw that consent at any time.
GDPR also includes some guidelines for how companies can implement these regulations.
Here's the thing: GDPR is fairly easy to implement for a company that actually cares about data privacy. You want to work with those companies anyway.
Here's the thing: GDPR is fairly easy to implement for a company that actually cares about data privacy. You want to work with those companies anyway.
From a data perspective, personally identifiable information isn't even that necessary for most purposes. We don't need to know who you are to do 99% of the things we really need to do.
Many companies addicted to doing things they don't need to do with your private data though.
Many companies addicted to doing things they don't need to do with your private data though.
Full disclosure: In real life I'm a Big Data guy. I build data systems across the entire board, including data privacy and security. I breath this stuff, and I love it. I know what we can do with data and that's why I support these (late and soft) steps to make it user centric.
I'll also add that while GDPR is cool, companies really invested in working around it can do so and correlate your data to figure out who you are without violating the rules. It takes a lot of infrastructure to do it though, Google and Facebook.
Bad actors will remain bad actors
Bad actors will remain bad actors
• • •
Missing some Tweet in this thread? You can try to
force a refresh
