Seriously, it's like the OP went through GDPR, picked up the primary requirements already in the law, and then said "we should have something like that instead of GDPR."
As a (reluctant and unwilling) privacy professional who doesn't need the work, you are spot on. The state of personal data management in almost every enterprise before GDPR was abysmal. Certainly firms that had to comply with COPPA had some practices in place, but there's a reason everyone who could ran screaming from COPPA compliance for the last decade.
The very fact that businesses now have the procedures in place to even know what data they have and where it is going is a fundamental sea change and GDPR is responsible. I'll be the first one to say that it's horribly drafted, overbroad, and relies on a number of terrible premises and assumptions, but a total failure? It's doing exactly what it was intended to do (among many other things).
/div>
Techdirt has not posted any stories submitted by Billly.
Re: Re:
Seriously, it's like the OP went through GDPR, picked up the primary requirements already in the law, and then said "we should have something like that instead of GDPR."
/div>Re: FUD
As a (reluctant and unwilling) privacy professional who doesn't need the work, you are spot on. The state of personal data management in almost every enterprise before GDPR was abysmal. Certainly firms that had to comply with COPPA had some practices in place, but there's a reason everyone who could ran screaming from COPPA compliance for the last decade.
The very fact that businesses now have the procedures in place to even know what data they have and where it is going is a fundamental sea change and GDPR is responsible. I'll be the first one to say that it's horribly drafted, overbroad, and relies on a number of terrible premises and assumptions, but a total failure? It's doing exactly what it was intended to do (among many other things).
/div>Techdirt has not posted any stories submitted by Billly.
Submit a story now.