Comments on Profile Post by purr1n

Which parts of GDPR concern you?

Where to start? Definition or lack thereof of what constitutes direct or indirect identification. The monetary penalties. The scope, which extends across nations. The distributed regulatory authorities, i.e. enforcement consistency. The need for me to hire a data protection officer because of the number of records here. Inconsistent guidance from the various levels of governing bodies in the EU. Basically ALL OF IT.

Yikes. That sounds like a total shit show for smaller operators.

It's a total shit show for the larger operators too. I'm sure Germany will fine the shit out of Facebook or Google.

Can we throw money at the problem? Or is that too naive?

Yes, money usually solves regulatory concerns.

Sounds like a business opportunity to start a consulting company.

The question, then, is how much it's gonna take (which, honestly, if it's a lot then that's gonna suck ass in a big way). Won't be until they start flinging fines to establish a baseline for expected costs, I assume?

AFAIK it doesn't apply to NPOs. So unless sbaf is incorporated, you're pretty much safe

Awww, thats a bummer. I was looking forward to the SBAF Bake Sale...

My take on it is that the EU has no jurisdiction on a non-incorporated, non-commercial US based website, even if EU citizens use it. Worst case scenario, "staff members" in EU will have to give up the title so that the site is operated purely within the US.

Might have to kill EU loaner programs too. (Worst case)

Pretty sure it doesn't matter for SBAF?

If you made a company to run SBAF that would be something else, but otherwise just don't move the server to iurop.

Whiskey Tango Foxtrot?