Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by kerng | Hacker News Reader

Full thread

kerng·

This is big, and has GDPR fine written all over it. And I'm sure this will not be the last time we hear about this.

Also, very curious to learn more of the technical details down the road?

View on HN

Does gdpr forbid mistakes?

no, but it does mandate to notify the people affected by the error/breach/fudge up. I wonder if they would have notified anyone if it wasn't for GDPR.

Well, it wouldn't do a lot of good otherwise, since I'm pretty sure most data breaches aren't committed deliberately. The point is you should have measures in place that prevent those sorts of mistakes.

no, but "In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority competent in accordance with Article 55"

Not mistakes as such, but it'll probably invite an audit wherein they'll assess what strategies they took to mitigate a potential issue like this. If they're found to be inadequate and it also impacted a resident of the EU then maybe they'll slap them with a fine.

Well, at least they will have to make sure they performed due diligence with testing- because a test would reveal this pretty quickly. You know real testing, not using customers as Guinea pigs

If you do it by accident, you pay a fine. If you do it knowingly someone should go to jail. It's time to hold those tech companies to a higher standard.

Reply on news.ycombinator.com