Hacker News Reader

Comment by Etheryte | Hacker News Reader

I don't see what you mean. It's very easy to be GDPR compliant, just don't track your users. In fact, it's more work to be non-compliant than to be compliant.

View on HN

That depends on what you are doing. If you are doing ecommerce, you need shipping address. GDPR does add work in this case.

A little extra work in order to kill a lot of adtech is arguably a good thing.

Is not using the shipping address for any other reason than shipping an order really that much more effort?

Sure, protecting that information is more effort, but you should be doing that already, right? not just from a GDPR perspective but a business perspective too - if a competitor can get a list of all your clients and send them brochures with 10% discount on your prices, you'll close down pretty quick.

Why do you have the list? Ideally, you purge their information after the order is delivered.

I agree all systems should have better support for autocompletion so that users configure address only once for device, not for each service. Not only is this more private, it is also more convenient. Alas, until support is in place, remembering address is significantly more convenient for users.

"protection" would include deleting once no longer required, does it not? Can't lose something you don't have in the first place.

> not just from a GDPR perspective but a business perspective too - if a competitor can get a list of all your clients and send them brochures with 10% discount on your prices, you'll close down pretty quick.

Link to this ever happening pre-GDPR?

This is pretty well documented in business law. former employee transfers to competitor, takes clientele with them.

https://www.acumenbusinesslaw.co.uk/2018/07/23/a-former-empl...

Amazing how people won't spare a minute to enter their details every time they place an order.

To them, I'd say "order with Amazon, then", but sadly that's a lot of lost clients.

Reply on news.ycombinator.com