Hacker News Reader

Comment by geocar | Hacker News Reader

How many of these requests do you expect?

I imagine most companies might only deal with this once or perhaps twice ever, and if they do not keep very much personal data then automating it would not be very efficient use of their time. That's why in general I'd wait until you get such a request, ask your lawyer to explain it (will probably only cost a few hundred pounds), then decide what to do next.

Only very large companies (or companies that deal with a lot of personal data) will benefit from up-front automation.

View on HN

Since the content of the request is very generic and applies to almost any individual and business, it's not unthinkable that it will be automated on the other end, so anyone can push a button and send the request to hundreds of companies of their choosing.

I certainly have several businesses in mind that I plan to send requests to once GDPR is in place.

EDIT: Although I suppose small, non-EU businesses that mostly do not deal with personal data are unlikely to receive any requests. So you are probably right that "most companies" are unlikely receive GDPR requests.

It’s already been automated.

https://selbstauskunft.net/ exists to allow you to send a BDSG §34 request (like GDPR request, but under the older German law for it) to basically any company. You select the company, sign it, and they automate all other steps.

I’ve sent dozens just this week.

Do you actually read the dozens of responses? Or are you just doing it to annoy people?

Yes, I read the responses and take action upon them. The last time I quit my bank account to move to a different bank.

Also, I'd recommend sending another request some time after quiting your contract with the company, just to make sure they give you a written guarantee that they deleted all data about you they don't _seriously have to_ maintain.

I intend to use it as well. Since I'm about to move, I wait until I have the new address. Yes, I'm interested what I will get in return.

I also consider it activism to keep companies aware of their responsibilities.

..and drive up the cost of goods and services.

Does anyone actually understand that this law will make things cost more?

Keeping my data private has costs associated with it? What a shocker!

Do you also argument against mandatory seatbelts? All they do is drive the cost of cars up. The justice system that works to enforce the laws brings the taxes up should we get rid of it too?

This guy being the equivalent of a car manufacturer in your analogy...

Maybe. But it's worth it.

I read them, and often I make decisions based on this — or can use it to convince e.g. my family to stop using payback (a discount scheme where a company logs all your purchases, even cash ones, and you get ~1% cashback).

Why do you think otherwise?

I think if you can easily automate it this is the time to because it will make everything easier as privacy rights continue their spread to additional countries and on to the UN's charter on human rights. Granting the rest of your users the same rights before they officially have them seems the right thing to do because it does not seem ethical to only uphold some of your users privacy.

Reply on news.ycombinator.com