> You don’t need to hire such a person since you’re way too small for the thresholds

> You also have to keep up with other regulations; that’s the price of doing business

Which one is it then? As small business I am suppose to follow all that ethical regulation bs, the same way as large company, without hiring extra peolle? But I should do it unpaid, in my free time (sleep less, or quit day job)?

Keep on mind I get lower salary than garbage man!

> they absolutely value if you’ve tried your

I do not "store data",. I have a free gmail account, I do not have a "data retention policy". But by GDPR i have to follow the same rules a s facebook!

> they absolutely value if you’ve tried your best....

My absolute best is to check once every a few years. That is not going to fly with goverment!

The only real help I got in past 5 years was AI! It can explain new changes, and audit my workflow, without paying 100x my salary to some consultant!

▲

9dev a day ago | parent [-]

> Which one is it then?

You don’t need a dedicated data protection officer, because your company is too small for that. You also don’t have to abide by lots of regulations that only apply to bigger businesses. But you still need to comply with the basic requirements, and that is your job as a business owner. I know what I am talking about, because this is part of my job. So unpaid doesn’t really match the reality here, right? Or do you consider filing your taxes as unpaid regulatory bullshit work too?

> Keep on mind I get lower salary than garbage man!

It doesn’t sound like your business is very worthwhile of keeping up, then? I don’t say this in spite, but if you don’t have a reasonably good income from your company, why do you put up with all the hassle in the first place..?

> I do not "store data",.

Sure you do, if you sell anything. You need to know where to ship stuff, customers contact you, pay you, all that. And as your customer, I don’t want you to store that longer than necessary or sell it to someone else.

▲

throw8484949ii a day ago | parent [-]

> You don’t need a dedicated data protection officer, because your company is too small for that.

But I do need dedicated comliance officer! The lower thresholds applies from 250 employees. I still have the same obligations as larger companies!

And if do notmp comoly goverment will fine me to oblivion!

> So unpaid doesn’t really match the reality here, right?

It absolutely matches the reality. You expect me to do stuff for free. Or can I demand extra money to match minimal salary on my tax return?

Luckily AI can now automate this shit, so now I spend cents instead of dozens hours of labour!

> It doesn’t sound like your business is very worthwhile of keeping up, then? I don’t say this in spite,

Because I have social responsibility to make some rare stuff available, as you would put it! But EU is not making it any easier!

> If you indeed do end up with authorities auditing your business, they absolutely value if you’ve tried your best

So at end I should hope for the best right and relly on merci? My gov just loves to skull fuck "capitalists"!

▲

9dev a day ago | parent [-]

> But I do need dedicated comliance officer!

There is no compliance officer required by law, at least not in any regulation introduced by the EU.

> The lower thresholds applies from 250 employees. I still have the same obligations as larger companies!

If you have more than 250 employees, you really should have both a higher salary than a garbage man and be able to afford someone to take care of your compliance duties.

> You expect me to do stuff for free. Or can I demand extra money to match minimal salary on my tax return?

I don't expect anything. You run a business. Anything you do related to that business is your own working time, just as anything I do in regard to compliance or data protection is of course billed working time. You file your taxes in your working time, you pay your bills in your working time, and of course you also read up on laws you need to comply to in your working time. Those are table stakes for doing business everywhere. Do you think American companies don't have to comply to regulations?

> Because I have social responsibility to make some rare stuff available, as you would put it!

All props to you for making that choice, then, but it's still your decision to have a company and that means you have to abide the law.

> But EU is not making it any easier!

The EU is responsible for so many things you just take for granted: A single market larger than the USA with a single currency; hundreds of EU-funded programs for small businesses with grants available easily; common standards across the entire union; protection from foreign traders; cross-border regulation and mobility; even things like funding for public infrastructure, art, and education all around you that you don't know of, because you never cared to look.

Just because you have a responsibility to think about and extra work to enable handling data your customers entrust you with carefully doesn't invalidate all of these efforts.

> So at end I should hope for the best right and relly on merci? My gov just loves to skull fuck "capitalists"!

You should try to think about protecting the personal data you handle responsibly and be ready to demonstrate that when somebody asks. Again, I am in the same spot and have been for years. This is doable.

	▲	throw8484949ii a day ago \| parent [-]
		> I don't expect anything. You run a business. > And besides, if you’re unable to accept that you have a social responsibility when you run a business, I don’t know what to tell you? You were very clear as a business owner i have tons of extra responsibilities. I should go extra mile to "demonstrate". I am single guy, with a few houndred euro a month (lower salary than garbage man), and I have the same obligations as company of 249 people! > There is no compliance officer required by law > and be ready to demonstrate that when > they absolutely value if you’ve tried your best as opposed to not caring at all; Again, most companies hire an office to "demonstrate best efford" and to offload personal responsibility from company owner. This still applies to one person business! > The EU is responsible for so many things you just take for granted: A single market larger than the USA with a single currency; hundreds of EU-funded programs for small businesses with grants available easily; common standards across the entire union; protection from foreign traders; cross-border regulation and mobility; even things like funding for public infrastructure, art, and education all around you that you don't know of Are you even in EU my friend? I was unable to sell into germany becauee of some local BS. Every country has their own taxes, localization and regulations, there is no single market! EU has several currencies! EU does not protect from foreign traders, it pushes contaminated chicken from outside EU that contains salmonela! Public infrastructure, education and art is responsibility of national goverment, EU sponsors maybe 2% of that! > just as anything I do in regard to compliance or data protection is of course billed working time Here is the core problem! You are not eshop owner! You are consultant who directly benefits from more regulations!!! Of course you will push for more regulations and more "social responsibility"! Luckily normal people can replace consultants with AI!