1. 59
  1.  

  2. 33

    While I think a website like this would make sense in a few years, right now I think GDPR is complicated, confusing, and scary enough to a lot of companies that they are going to make mistakes. I’d rather help them do it better than mock them.

    1. 15

      As one of the thousands of engineers who had to figure out how to shoehorn a six-month compliance project into a lean team’s packed roadmap, I concur. This wasn’t easy, not even at a company that respects user data to begin with. Lots of the jokes I’ve seen about GDPR right now just lessen my opinion of the teller.

      1. 23

        On the other hand, we’ve all had literally more than 2 years to work on said six-month compliance project, and the fact that so many companies try to push on until the very end to start working on it is the actual problem here IMO.

        1. 4

          Not from my point of view – who cares if companies just woke up to GDPR two weeks ago, if I don’t use them for data processing? None of my actual pain came from that. But I definitely spent a lot of time working on GDPR when I’d rather have been building product, other deadlines slipped, things moved from To-Do to Backlog to Icebox because of this. We’re ready for GDPR, but that stung.

          1. 3

            I was essentially trying to put “People like you don’t get to complain about it being hard to fit something into a certain time period when they had literally 4 times that amount of time to do it.” ^__^

            1. 3

              Well, if people like you (who didn’t even do the work) get to complain, then so do I! If someone tells me they’re gonna punch me in the face, then they punch me in the face, I still got punched in the face.

              1. 4

                I did our GDPR planning and work, and I’m so glad to see it in effect. The industry is finally gaining some standards. Sometimes it’s time to own-up that you care more about your own bottom-line than doing the right thing, if you complain about having to give up a “rather have been building product” attitude.

                1. 1

                  Sometimes if you don’t build a product, GDPR compliance becomes irrelevant because you never get a company off the ground. As a one-person platform team until last September, I don’t regret how I prioritized it.

                2. 6

                  Well, if people like you (who didn’t even do the work) get to complain, then so do I!

                  I actually did do the work. But either way, complaining about it being a pain overall is just fine, because it is. On the other hand, explicitly complaining that because you had to do it in 6 months you had issues fitting it in, had other deadlines slip, and had to essentially kill other to-do’s is a very different thing. If you’d used the extra 18 months, I bet you’d have had much less issues with other deadlines.

                  If someone tells me they’re gonna punch me in the face, then they punch me in the face, I still got punched in the face.

                  This analogy doesn’t even make sense in context…

                  1. 6

                    If you’d used the extra 18 months, I bet you’d have had much less issues with other deadlines.

                    I’ll totally remember this for next time.

        2. 25

          Well, I agree in general, but this article specifically highlights some cases of just plain being mean to your users. I’m okay with mocking those.

          1. 7

            I disagree. GDPR is expensive to get wrong so the companies aren’t sure what to expect. They are likely being conservative to protect themselves.

            1. 7

              They were not conservative in tracking users, and spending for tracking and spying on users was not expensive?

              As a user I don’t care about the woes of companies. They forced the lawmakers to create these laws, as they were operating a surveilance capitalism. They deserve the pain, the costs, and the fear.

              1. 1

                and spending for tracking and spying on users was not expensive?

                Tracking users is very cheap, that’s why everyone can and does do it. It’s just bits.

                As a user I don’t care about the woes of companies.

                Feel free not to use them, then. What I am saying is that GDPR is a new, large and expansive, law with a lot of unknowns. Even the regulators don’t really know what the ramifications will be. I’m not saying to let companies not adhere to the law, I’m just saying on the first day the world would probably benefit more from helping the companies comply rather than mocking them.

                EDIT:

                To be specific, I think companies like FB, Google, Amazon, etc should be expected to entirely comply with the law on day one. It’s smaller companies that are living on thinner margins that can’t necessarily afford the legal help those can that I’d want to support rather than mock.

          2. 10

            It’s not like the GDPR was announced yesterday. It goes live tomorrow after a two year onboarding period.

            If they haven’t got their act in order after two years, it’s reasonable to name and shame.

          3. 7

            Adobe should be in this list.

            I have unsubscribed from all the Adobe spam, but now they have sent a confusing E-mail saying that GDPR means I need to review my communication preferences. There is no indication that I can simply disregard this e-mail, and clicking the link in the e-mail will take you to a page that re-enables all the spam!

            Several companies have employed this exact scammy strategy, but Adobe is the biggest one that I remember.

            1. 1

              As far as I understand from reading the GDPR, you could send them an email with a request to erase all the data that they have on you, and they are obliged to remove it in a month.

              (IANAL)

            2. 4

              This person misses the point of their own collection.

              1. 4

                This awesome hall of shame preferred to shutdown than to comply apparently.

                1. 2

                  Seems to be down? I get an error “Too many redirections”

                  1. 2

                    “Due to the GDPR, you have to upgrade your product.”

                    Ha! If you’ve gotta do something, you might as well turn a profit. Next step: Blame random outages on the GDPR, as I’m sure has already happened. This is such a gift for certain companies.