There may be trouble ahead...

[webbouk]

One issue that no one has touched on so far with regards to GDPR is the forum trouble causer.
We all have them from time to time and how we deal with them is specific to yourself and team.

However, if said user decides to test your skills and knowledge regarding GDPR he/she could effectively tie most of us up in knots not just regarding time but financially requesting information initially then requesting further details based upon the information given, ad infinitum and with the law on their side.

Should you decree that you've given them everything you need to in order to comply with GDPR, are you sure you have? Basically no one knows nor will know the full correct interpretation so how can anyone be sure?

And blocking them wouldn't work as you'd still have to communicate with them when requested.

Food for thought

 

[Kirby]

You are absolutely right, if a troublesome user really wants to piss you off, the GDPR seem to be a very powerful weapon.

That's why I think it is really importing to get everything done as compliant as possible to limit the financial risk.

 

[trapped_soul]

One issue that no one has touched on so far with regards to GDPR is the forum trouble causer.
We all have them from time to time and how we deal with them is specific to yourself and team.

However, if said user decides to test your skills and knowledge regarding GDPR he/she could effectively tie most of us up in knots not just regarding time but financially requesting information initially then requesting further details based upon the information given, ad infinitum and with the law on their side.

Should you decree that you've given them everything you need to in order to comply with GDPR, are you sure you have? Basically no one knows nor will know the full correct interpretation so how can anyone be sure?

And blocking them wouldn't work as you'd still have to communicate with them when requested.

Food for thought

Agreed, the complexities can be endless on this - especially if someone is being a right arse about the whole thing, purely to cause you issues.
Then fires back at you with something you accidentally omitted and so forth.
Nightmare scenarios forthcoming. You can just see it.

 

[webbouk]

There's a line within most building regulations in the UK which refers to 'a competent person'

Basically it means that to comply with that specific regulation you must use a competent person. However it does not define what a competent person is.

The trade bodies would interpret it as someone who has the necessary qualifications and belongs to their 'club' , membership of course having been obtained by way of a fee.
Yet not one person has been prosecuted regardless for doing a job correctly. The opposite cannot be said for someone who did not.

What I am trying to say is no court in the EU is going to take any one of us to task for not implementing GDPR to the enth degree unless our intention is to misuse a person's data in the first place.

Use the basic tools being released to cover yourself and get on with life.

 

[trapped_soul]

There's a line within most building regulations in the UK which refers to 'a competent person'

Basically it means that to comply with that specific regulation you must use a competent person. However it does not define what a competent person is.

The trade bodies would interpret it as someone who has the necessary qualifications and belongs to their 'club' , membership of course having been obtained by way of a few.
Yet not one person has been prosecuted regardless for doing a job correctly. The opposite cannot be said for someone who did not.

What I am trying to say is no court in the EU is going to take any one of us to task for not implementing GDPR to the enth degree unless our intention is to misuse a person's data in the first place.

Use the basic tools being released to cover yourself and get on with life.

Agreed and to be fair, one thing I've said over and over is; most good admins should be doing most of this anyway as good ethics and business practice.

 

[Jaxel]

GDPR is a disgrace. It flies in the face of Safe-Harbor.

 

[trapped_soul]

GDPR is a disgrace. It flies in the face of Safe-Harbor.

Why?
It is, after all. trying to make sure that people have the right to know what is happening to their data. Why does it fly in the face of safe harbour?

 

[webbouk]

Who actually determined that 'your' data was actually yours?
I went for a walk on the beach yesterday and left my footprints in the sand. Does that mean that those footprints actually belong to me?

You inhale and exhale every time you breathe. Does that give you the right to claim possession of the air that was once yours?

The same in respect to data.
I've posted this on the xenforo forum, a public forum, I've left a footprint, obtained cookie or two, the information I've posted is being published by xenforo who now retain copyright of such, and I did it willingly.

Rather than babysitting every internet user maybe we should just educate them

 

[S Thomas]

Why?
It is, after all. trying to make sure that people have the right to know what is happening to their data. Why does it fly in the face of safe harbour?

Because it's now easier than ever to steal, sorry, I mean, "transfer" your personal data to another service, e.g. to the US.

 

[Suzanne O]

You could ip ban them and report them to their isp.