GDPR

“GDPR is a regulation, and right now there is no certification for it. The regulation does have language around certification in it, but nothing's actually been developed. It's referenced, but it's not developed.”

“Ultimately, I think what's going to happen is that when it comes time for there to be complaints or problems, what I think the EU regulators are sort of counting on is that there'll be a bottom-up view, and like, people will sort of police this on behalf of th…”

“And with the data protection principles under GDPR, the one that I've heard the regulators focusing on the most is transparency. So they are putting a huge amount of work in the making sure individual citizens in Europe understand that they have the right to k…”

“There is one escape route from GDPR, which is the provision in the regulation, which is also the same as the 95 directive, which says that data that are fully anonymized, meaning that no individuals can be identified are outside, outside the scope of GDPR. So …”

“And I think everybody's going to be shocked at just how much potential there is for risk that they weren't really thinking about.”

“Well, in legal terms, there's a thing called long-arm jurisdiction, and this is probably one of the longest of the long-arm jurisdictions, and what I mean by that is a situation where a local court can actually assert jurisdiction over someone in another state…”

“Yeah, I really agree with that, because, like, when you're at a big company, and you're hit with GDPR, like, you, I know exactly how this is going to work. Like, you've got all the subsidiaries, and you know, too. Well, you're paralyzed, because you have to, y…”

“So I think they're going to look at the implementation of these as well as whether or not that you have them.”

“As vague as the GDPR might appear to an engineer in some places, it got very specific very quickly on penalties.”

“Well, I have to say, I do recommend that folks take a look at it, because working backwards from there, they actually tell you what they care about when they're going to potentially assess a fine, which is, you know, is there negligence? Was it intentional? So…”

“If you're at a smaller company and you need somebody to lead your GDPR compliance project, then, and you don't have a, you know, person in charge of compliance, then my advice is to look for what I think of as your risk sentinel. ... You want the people who ca…”