📜 ⬆️ ⬇️

GDPR - double-edged sword

What was the Internet 1.0 to social networks, until the broad masses, fighting for money and power?

Now is another internet. From time to time there are innovations that solve old problems and add new ones ...
One of these introductions is the GDPR , which comes into effect in May 2018.



For example, there is a problem: detailed telemetry is collected in the most popular operating systems, which is even more difficult to disable than to read the license agreements for these products.
And here is the solution:
Proof of the need for data processing. And not to the end user, but to the representative of the European Parliament, who may demand your agreement with the end user and will be very upset if he turns out to be a 10-page legal boltology. The purpose of data processing in the contract should be clearly stated, and the contract itself should be simple and clear.

Or it is possible to fill the VKontakte page for years with care, and then in one day get a site lock by providers or a hacked account. Information may be lost forever. How to insure against this?
Possible Solution:
Access rights : When GDPR comes into force, users will have the opportunity to request a complete copy of their personal information from the company's servers, absolutely free.
It seems that it will be possible to export your data accumulated in social networks, on forums and other "clouds" ... Roll up your lip?



As usual, there should be half a year of tar in the barrel of honey. One of the new problems of opportunities is striking now.
')
Right to oblivion : When filling out an application for revoking an agreement for the processing of personal data, as well as proof that personal data is no longer needed by the processing company for the initial purposes of processing it, they will be deleted.

This is reminiscent of the struggle for copyright, where the stated increase in motivation to explore, but what happens? Billions of people invent what has long been found. Groundhog Day.

Many already know about IPFS technology. The point is that any site, file or directory can be found by its hash sum (which is also an address), wherever it is stored. And it can be heard from any network node or even from several at once. I went to the page - and now it is already available without the Internet. The system is similar to torrents on magnet-links, but more perfect.
Beautiful utopian stuff. For those realities, when there is no prohibited information.

In IPFS, as in the blockchain, it is impossible to erase specific information guaranteed without damaging the structure (perhaps this is somewhat similar to an attempt to erase the memory from the human brain). And for good, there is no problem. On any, arbitrarily false and irrelevant, information, you can add a new, disproving. Natural solution. The case of technology - a search engine, which of all the trash, no matter how much it is, will give the information most relevant to the query.

And more nuance
The law increases fines to 20 million euros or 4% of the company's annual turnover, whichever is greater. In addition, it is now much easier to prove the fact of a leak.
How can it suddenly become easier to prove a fact?
For a small business, what does a € 20,000,000 fine mean?
Update: in this aspect, everything is not so clear .

All controllers and processors that process personal information of EU residents are now obliged to have an official representative in the European Union, regardless of where they are located.
Again, it is for a small enterprise that this bureaucracy will probably be very heavy.

If ketchup, then Torchin. If the video hosting, then YouTube. So here we go!





GDPR features
Source of citations

Source: https://habr.com/ru/post/374461/


All Articles