From California state regs to Europe's GDPR

A look from the other side re: privacy and compliance

[tangor]

Much-lauded privacy laws risk being undermined as compliance is outsourced to tech vendors and "toothless trainings, audits and paper trails" are confused for genuine protections, a New York Law School professor has said.

In a paper in the Washington Law Review, published online last week, Ari Ezra Waldman argued that recently strengthened privacy laws actually offer "false promises" for consumers.

[theregister.co.uk...]
Very interesting look at the future of compliance (and using third parties to achieve it) for GDPR and other privacy concerns. A few points offered will cause a moment of reflection to all concerned.

[graeme_p]

Makes sense to me.

I think GDPR may have made things worse in some ways, because it is harder (relatively) for smaller companies to comply, thereby giving bigger business (which are the problem because they have more data, and are more likely to combine databases from different sources) an advantage.

[NickMNS]

@graeme_p I share your view exactly.

[tangor]

This report reveals potential pitfalls for those who rely on 3rd party "compliance mechanism...ie. algos) and a resultant exposure to "failing to comply".

Meanwhile, GDPR, by itself, has created a new cottage industry that many (most?) should embrace with a grain of salt.