Yes, an economy based on deception that uses it's customers in unknown ways, most of the time in ways entirely unrelated to the product, is failing after appropriate regulation.
All consequences seem entirely acceptable.
Businesses must act with responsibility for society. the regulator is usually lax, until all hell break loose.
Those businesses seem to all be doing fine. They just implemented one of those annoying pop ups that you have to agree to before you can see their site, and they’re still doing all the same things with your data. But with your “permission” now.
All the other businesses, though, the ones who were never planning to do anything bad with your data. Those ones still all had to do a bunch of work and show that same stupid notice that drives their customers away. And they’re a lot less able to defend themselves against the mean spirited user behaviour outlined in the article.
And for added fun, the eu now knows that it can pass silly laws like this as often as it likes, and the whole software world will need to devote a team to do a full sprint implementing another piece of user hostile code that doesn’t help their business.
> another piece of user hostile code that doesn’t help their business.
That's entirely their problem. Compliance with the law wouldn't require user-hostile "code" (I think you meant UI) if the business model wasn't user-hostile in the first place. It wouldn't hurt their business if their business was reasonable.
True. Users prefer "free" services. I can imagine that some do prefer paid services, but the majority expects things on the Internet to fall from the sky.
That said, I think your point doesn't prove those businesses good to have.
> though, the ones who were never planning to do anything bad with your data. Those ones still all had to do a bunch of work and show that same stupid notice
If they're not planning to do anything bad with the data (that is, only use the data for what they need to work with the customer) they don't have to show the notice. It's that simple. RTFR
>“Since 2016, newspapers in Belgium and Italy have removed articles from their archives under [GDPR]. Google was also ordered last year to stop listing some search results, including information from 2014 about a Dutch doctor who The Guardian reported was suspended for poor care of a patient.”
> including information from 2014 about a Dutch doctor who The Guardian reported was suspended for poor care of a patient.
FWIW, according to the Guardian article they reference, that case was not about getting the fact that the doctor was investigated and temporary suspended (that's public record), but a website taking such records and publishing a "blacklist of doctors unfit to treat patients". It's more a libel-like case than a privacy one.
> "The judge said that while the information on the website with reference to the failings of the doctor in 2014 was correct, the pejorative name of the blacklist site suggested she was unfit to treat people, and that was not supported by the disciplinary panel’s findings.
The court further rejected Google’s claim that most people would have difficulty in finding the relevant information on the medical board’s Big-register, where the records are publicly held."
That statement sounds to me to be synonymous with "this doctor does not / should not have their license"; given that a court actually decided otherwise, this looks libelous to me.
When did a court decide it was libelous? As far as I understand a court decided it fell under Right to be Forgotten, which surely extends beyond libel laws.
This is a circular argument. The courts decided it falls under the law in question, but that isn’t a justification in itself for the law in question.
> "The judge said that while the information on the website with reference to the failings of the doctor in 2014 was correct, the pejorative name of the blacklist site suggested she was unfit to treat people, and that was not supported by the disciplinary panel’s findings."
Again, IANAL, but what I’m reading does not seem relevant to libel. Namely, the pejorative title of the website has nothing to do with the claims they’re making.
If the doc had a libel case, why the hell did they not go for that, instead?
Sure. But what about the 100% of the population who are not perfectly rational beings with infinite time and energy to do thorough research before getting outraged?
Couldn't agree more. It's a biased presentation of the facts, and could easily be reframed. Take "compliance costs are astronomic", for instance, could just as easily be rephrased "Companies spend more money than ever to ensure the safety of customer data". I know that's certainly the case where I work: it's been a massive amount of work, but it's great for our customers. If it weren't for GDPR, I am certain that management wouldn't have allowed us to do it.
Cleaning up a shitty system is expensive, and there are bumps in the road. It's still worth doing.
All consequences seem entirely acceptable.
Businesses must act with responsibility for society. the regulator is usually lax, until all hell break loose.