| > GDPR is easy to implement once, but it is constantly changing every year. No it’s not. If you’re running an online store, compliance is pretty straightforward. Most of the PII you collect has a good reason: payment, fulfilment, fraud prevention, etc. so you don’t need consent for that. If you’re collecting marketing data, you need to ensure it’s clear that you’re using it for that and keep your records accurate if you’re informed they changed. For store analytics, your cookie banner covers you, the major players all integrate into standard tools, and they keep their compliance up to date, so you’re fine there. Small mistakes are very much not punished. Your country’s Data Commissioner equivalent will want to see you try to be compliant first. You’re only going to get put out of business on a first offence if you’re taking the piss. I guarantee any example you provide me as evidence will be exactly that, but feel free to try. |
| |
| ▲ | scott_w a day ago | parent [-] | | By “major player” I meant the analytics companies that you pay, not you. > Yet more extra work! If “customer asks me to update my records on them, so I do it,” is too much work then you really shouldn’t be in the business that requires it. > Sounds like work for extra GDPR officer! Or you just ask “what do I need to do?” The official tells you, you do it, they say “thank you.” Seriously, all your answers here tell me you’re trying to do some shady shit and not even making money from it. If you were a simple retailer, as your original post implied, you would not be worried about the complexity of handling GDPR. | | |
| ▲ | throw8484949ii a day ago | parent [-] | | just because I have small profits, does not mean i sell drugs! (But drug dealer would probably get better deal from police for breaking GDPR). I am worried about several thousands euro fines! I have my own eshop, i do not use "major player"! Too expensive. > Or you just ask “what do I need to do?” The official tells you, you do it, they say “thank you.” And than you get different offical, with different opinion. Their advice have same weight as weather forecast! | | |
| ▲ | scott_w a day ago | parent [-] | | > just because I have small profits, does not mean i sell drugs! I never said anything about drugs. I’m talking about doing illegal things with people’s data. > And than you get different offical, with different opinion. Their advice have same weight as weather forecast! If you’re getting audited this often you are DEFINITELY playing fast and loose with the rules. I have no sympathy for you. | | |
| ▲ | throw8484949ii a day ago | parent [-] | | You said "shady shit"! Deleting some data a few days/weeks or months latter too late is not "shady shit"! You obviously have no idea how business here works! Some gov offical will tell you to delete data for GDPR. Some other gov offical will ask for the same data latter, to prove tax records or people complied with vacine mandates! You get fined from both sides! Every two years there is a big law reform of some area, while other areas with conflicting laws are still in effects. And small eshops are easy targets for fines. Large corporations are untouchable. | | |
| ▲ | scott_w a day ago | parent [-] | | > You said "shady shit"! Look, I don’t think English is your first language, so I’m trying to give you the benefit of the doubt but it’s getting really tiring having to explain basic things like “context” to you. I’m obviously meaning in the context of data governance. I’m accusing you of selling customer data to unscrupulous characters, to be precise. > You obviously have no idea how business here works! Some gov offical will tell you to delete data for GDPR. Some other gov offical will ask for the same data latter, to prove tax records or people complied with vacine mandates! You get fined from both sides! Either you’re bullshitting me or you live in Eastern Europe and need to give kickbacks to stay in business. If the latter, that’s not the GDPR’s fault. It’s the fault of your government for not being able to draft law. > Every two years there is a big law reform of some area, while other areas with conflicting laws are still in effects. That’s not the GDPR, that’s your country having a poor grasp of how to make law. It’s a different problem and I’d recommend either lobbying your local representative or just leave to a sane country which will let you do business. | | |
| ▲ | throw8484949ii 20 hours ago | parent [-] | | > The official tells you, you do it, they say “thank you.” > or just leave to a sane country So first you tell me to blindly trust officals, now i should leave country! Great advice! > That’s not the GDPR GDPR is drafted by EU. They went way too far, and made it imcompatible with local laws! | | |
| ▲ | scott_w 18 hours ago | parent [-] | | > So first you tell me to blindly trust officals, now i should leave country! Great advice! Again, context. I’m bored of explaining it to you like a toddler so I’ll just tell you to reread my comments very slowly and figure it out. > GDPR is drafted by EU. They went way too far, and made it imcompatible with local laws! This is just a nonsensical statement. GDPR has been in force for 7 years. You haven’t given an example of where it changes, because it fundamentally hasn’t. |
|
|
|
|
|
|
|
