Comment by fwdpropaganda | Hacker News Reader

Comment by fwdpropaganda | Hacker News Reader

Parent Full thread

> Startups should have the right to engineer their platforms in the way that they see fit. Because of GDPR, no startup (at least those that accept EU traffic) will ever achieve the social lock-in that Instagram has. Instagram built their user base in an era where it was difficult for average users to get their pictures out. Did your startup come up with a new set of filters that make photos go really viral? Awesome! Users will just make it in your app and then export it to Instagram, where people will actually see it. You'll go bankrupt...but Instagram usage will increase as a result of your efforts.

Do you realize how backwards that is?

All throughout history it's been the case that circumstances change. Maybe what was a viable business to start before, isn't now. Well, those that took the chance when this was allowed are banking on it, but now no one else can.

Your argument is: person X exploited bad thing Z before, so we must continue to allow back thing Z just in case person Y also wants to exploit it. No, that's completely backwards.

Some people got rich off slavery, so we shouldn't make slavery illegal because my startup wants to take advantage of it too. /s

It's astounding to me that people believe they're entitled to force free services to provide them extra features by the force of law.

You're not allowed to launch a service that provides X, and if you want to, you must also include X + Y + Z.

Am I allowed to even open a port to a server on my local machine that allows users to voluntarily enter some information and does something with it, without being subjected to the full force of the legal system?

I have some experience with the US medical software industry, and this sort of feature-checklist regulation doesn't improve anything. All it does is lock in the existing players and prevent any innovations that aren't explicitly outlined in the law.

> It's astounding to me that people believe they're entitled to force free services to provide them extra features by the force of law.

> You're not allowed to launch a service that provides X, and if you want to, you must also include X + Y + Z.

If you stop for a bit you'll realize that most things in society work like that. It's called regulation. Once you get used to it you'll stop being astounded and wonder how things were ever done differently.

Right, that's fine in the real world, where the existence of something affects you. Real objects take up physical space, and can be noisy, polluting, or inaccessible.

Nobody is forcing you to look at, interact with, or even acknowledge the existence of my local web server. There is no stronger sense of the word "voluntary" than the one that can be used to describe web services. My service doesn't even exist to you, unless you explicitly choose to engage with it.

You, on the other hand, believe that it should not be allowed to exist for other people (at legal gunpoint!), unless it conforms to the features that you believe it should have.

This is more akin to not being allowed to invite people into my home, unless my bathroom and kitchen meet certain (arbitrary, non-structural) requirements.

>This is more akin to not being allowed to invite people into my home, unless my bathroom and kitchen meet certain (arbitrary, non-structural) requirements.

Like fire code? :)

I was debating whether to remove that sentence, and ended up adding the (non-structural) part because I though someone might take the analogy that way. Note that fire codes in particular don't exist in many places, including much of the U.S.

Nobody is going to die from not exporting their data - except in medical software, where the current U.S. feature checklist regulations haven't helped. For many websites, GDPR is next to pointless while adding broad legal requirements.

You're making this argument as if the whole FB/Cambridge Analytica thing hadn't happened. There is power in these systems and when they're affecting our governmental structures we have a vested interest in regulating them.

This is perfectly analogous to the real world where e.g. pollution has tangible negative externalities. It will always be the case that when responsive governments exist, and a thing comes into existence that people perceive as a threat, people will leverage the government to mitigate that threat.

If your home were perched on a cliff above a school playground, to use a contrived example, the townspeople would have a keen interest in the integrity of your home including the kitchen and bathroom.

The same is true in many other cases. For example, employment law - nobody forces people to work for me, yet there are many restrictions on what I can write in the contract.

Defending a laissez-faire model of society, only with restrictions on externalities, is reasonable, but it's also very far from how societies currently operate. The GDPR is not an exception. In fact, not even on websites - the Data Protection Directive, from 1995, already implemented restrictions on how EU sites can be run. The GDPR is only an expansion on that.

You were subject to the full force of the legal system way before you set up a port on a server.

And you can totally set up a port on a server to allow users to voluntarily enter some information and do stuff with it. The law does not prevent that at all.

I think that you're misunderstanding the spirit of the "full force" comment. The fact that I'm subject to the "full force of the legal system" to with regards to preventing murder, doesn't justify every new regulation and its effects.

Does the law prevent it, if I don't want to spend time adding a full account verification system for personal data dumps, permanent data deletion, and other requirements?

You're comparing the inability to easily move pictures from one service to another to slavery? That's quite the leap, though not unexpected on HN these days.

Anyway, I hope you enjoy Instagram if you are in a GDPR-affected country, because no competitor will ever emerge as a result of this law. They'll have all of your data, and you'll have to agree to it being analyzed in whatever way they choose because there is not and never will be another service to go to (which renders this entire point of this law moot).

Reply on news.ycombinator.com