GDPR - anyone working in this area?

[plasticpig]

DELETED: Comment made by a member who's account has been deleted.

The user has the option of accepting behavioral and location based advertising or paying for the app; or finding an alternative app that is free and has no advertising or is displaying random adverts. What's wrong with that choice?

[fakenews]

DELETED: Comment made by a member who's account has been deleted.

In a perfect world it's a great thing, it raises the standard amongst firms and we can all feel safer on the internet etc.

However we don't live in a perfect world and the rub is that those who didn't give a crap before still won't - you'll have SMEs spending time on something that will undoubtedly distract from their everyday business (and there's already enough of that) while others run amok - one Israeli friend told me GDPR represented the biggest opportunity in years for his employer - no morals, cash is king with very little chance of them ever being caught.

I run a small Facebook group and was asked by a member to ensure I am GDPR compliant or I'd "face the consequences"...completely nuts.

[jonamv8]

Hoofy said:

Wait a sec. Fee? What? Where?

And what are the benefits of the GDPR to me as a small business owner? I have already put about 3 hours of unpaid work into this. I'm hoping to spend more money and time for no gain whatsoever.

Edited by Hoofy on Wednesday 2nd May 10:44

DELETED: Comment made by a member who's account has been deleted.

3 hours he's not earning money, instead dealing with red tape. What do you do - you cough up for yet another stealth tax on businesses :-)

[Hoofy]

fakenews said:

DELETED: Comment made by a member who's account has been deleted.

In a perfect world it's a great thing, it raises the standard amongst firms and we can all feel safer on the internet etc.

However we don't live in a perfect world and the rub is that those who didn't give a crap before still won't - you'll have SMEs spending time on something that will undoubtedly distract from their everyday business (and there's already enough of that) while others run amok - one Israeli friend told me GDPR represented the biggest opportunity in years for his employer - no morals, cash is king with very little chance of them ever being caught.

I run a small Facebook group and was asked by a member to ensure I am GDPR compliant or I'd "face the consequences"...completely nuts.

I'm going to be asking everyone if they're GDPR compliant when they greet me with "Hi, how are you?"

Thing is, more importantly what is your business policy for violence? Do you have a policy? How do I know that if I were to do business with you, you 100% guarantee that you won't kick the st out of me? Do you have a No Kicking Heads In sticker on all your doors? Do you have a specific area outside your offices where kicking the st out of someone is allowed?

I think the Offences Against the Person Act 1861 should be updated to have all businesses put stickers on their doors.

And as for your Israeli friend, I did wonder if that was the case.

Edited by Hoofy on Wednesday 2nd May 15:20

[okgo]

plasticpig said:

This quite frankly is bks. The user will often have the option of not receiving any adverts at all by paying for the app. A developer cant restrict functionality of the app for people who don't agree to opt in or opt out at a later stage because that is classed as detriment.

From the developer perspective targeted behavioral and location based advertising achieves a significantly higher click through rate as apposed to non targeted adverts so they make more money from the app.

So in the EU world users can have their cake and eat it too.

Is that true re restriction? I was under the impression that some apps that do not have a paid version were within their rights to tell people to do one if they say NO. Similar to how some sites do not let you browse with ad-clock enabled?

[jonamv8]

Hoofy said:

Hours - it's 3 hours more than I want to spend but I can see I need to spend a few more on this, unpaid.

Benefits - so none, really, then. I can't see my customers choosing me over another based on my GDPR compliance. And I have not even given it a thought when buying or signing up to stuff in the last two years.

What he says ^^^ and I doubt we are alone.

Just took the test and I qualify woohoo :-)

Not knocking TinRobot you're doing a great job on here and I am sure for your clients and if we offered GDPR consultancy we'd be loving it but for most business who have never played fast and loose with company data this is ball ache... When did my local plumbers merchants ever sell my details to an indian call centre?? The banks did

[okgo]

I've had a look at what consent is going to hopefully look like for app advertising (which is where I work) - I must say, lots has been left quite late with the framework etc. But hopefully (and I would imagine they will) most people will just click yes and that will be that. If they choose to delve in, then obviously things will get interesting, but most people won't give a st I would guess.

[Hoofy]

jonamv8 said:

Hoofy said:

Hours - it's 3 hours more than I want to spend but I can see I need to spend a few more on this, unpaid.

Benefits - so none, really, then. I can't see my customers choosing me over another based on my GDPR compliance. And I have not even given it a thought when buying or signing up to stuff in the last two years.

What he says ^^^ and I doubt we are alone.

Just took the test and I qualify woohoo :-)

Not knocking TinRobot you're doing a great job on here and I am sure for your clients and if we offered GDPR consultancy we'd be loving it but for most business who have never played fast and loose with company data this is ball ache... When did my local plumbers merchants ever sell my details to an indian call centre?? The banks did

Bingo!

Shall I threaten to grass up my gardener (pun intended) unless he gives me a 50% discount? I can't see him being GDPR compliant and yet I have no intention of changing to a gardener who is. I didn't even ask if he complied with the DPA when I took him on.

(And yes, not knocking anyone who has given me advice on here. Just annoyed by the unnecessary extra free work I'm having to do.)

Also, do you know how to ps off your current customers? Yep, send them an email to say you're GDPR compliant.

[Hoofy]

okgo said:

I've had a look at what consent is going to hopefully look like for app advertising (which is where I work) - I must say, lots has been left quite late with the framework etc. But hopefully (and I would imagine they will) most people will just click yes and that will be that. If they choose to delve in, then obviously things will get interesting, but most people won't give a st I would guess.

Yep - I've had GDPR guff pop up on some apps and websites. I have not read one word of it and just clicked ok.

[plasticpig]

okgo said:

Is that true re restriction? I was under the impression that some apps that do not have a paid version were within their rights to tell people to do one if they say NO. Similar to how some sites do not let you browse with ad-clock enabled?

For a certain value of true then yes. The catchily titled Guidelines on Consent under Regulation 2016/679 suggests that restricting app functionality based on lack of consent is a no no.

Guidelines on consent under Regulation 2016/679 said:

When downloading a lifestyle mobile app, the app asks for consent to access the phone’s accelerometer. This is
not necessary for the app to work, but it is useful for the controller who wishes to learn more about the
movements and activity levels of its users. When the user later revokes that consent, she finds out that the app
now only works to a limited extent. This is an example of detriment as meant in Recital 42, which means that
consent was never validly obtained (and thus, the controller needs to delete all personal data about users’
movements collected this way).

[plasticpig]

okgo said:

I've had a look at what consent is going to hopefully look like for app advertising (which is where I work) - I must say, lots has been left quite late with the framework etc. But hopefully (and I would imagine they will) most people will just click yes and that will be that. If they choose to delve in, then obviously things will get interesting, but most people won't give a st I would guess.

There is a whole host of issues around what's going to happen to old apps that will not be updated but still serve adverts. How do you ask for consent on an app / OS version that you no longer support?

[jammy-git]

Take it offline?

Facebook is a prime example to demonstrate that 99% of people don't give a st about what happens to their data. If they want to use a product, service, app, website or company then data privacy will be very low down on their list of priorities.

[jonamv8]

jammy-git said:

Take it offline?

Facebook is a prime example to demonstrate that 99% of people don't give a st about what happens to their data. If they want to use a product, service, app, website or company then data privacy will be very low down on their list of priorities.

Also agree with this ^^^

[Dixy]

DELETED: Comment made by a member who's account has been deleted.

Guilty as charged
Who are ICO
I have a small specialist retail shop.
4 staff, I only respond to customers e-mails and never store them.
We contact some customers by telephone to tell them their equipment is overdue for service.
I only became aware of GDPR 4 months ago.
The most information I have had is from you, there is nothing from the state not even a multi coloured giant furry animal on tv.
This and MTD is close to making me say enough is enough..

[RM]

Leithen said:

Interested by a Mercedes email received today - is the incentive to update consent/not consent legal?

I'd be interested in this too. I assume if the landing page asks for your email address for the competition entry (to be deleted after the competition had run), then separately asked you for consent to receive marketing emails from you, then it would be OK?

[Leithen]

RM said:

Leithen said:

Interested by a Mercedes email received today - is the incentive to update consent/not consent legal?

I'd be interested in this too. I assume if the landing page asks for your email address for the competition entry (to be deleted after the competition had run), then separately asked you for consent to receive marketing emails from you, then it would be OK?

The next page.

[Hoofy]

Dixy said:

This and MTD is close to making me say enough is enough..

Being an employee does on occasion feel tempting - at least you get paid to waste your time doing things that don't put money in your pocket; because if you're an employee, you're doing something pointless and someone else is taking the hit, putting the money in your pocket!

[Hoofy]

DELETED: Comment made by a member who's account has been deleted.

You're right - we're just annoyed we have to do it. I guess it's like the no smoking signs but a hundred times worse, as it's not just a case of buying some stickers for the door.

Speaking of which, do we need GDPR Compliant stickers?

[RM]

Leithen said:

RM said:

Leithen said:

Interested by a Mercedes email received today - is the incentive to update consent/not consent legal?

I'd be interested in this too. I assume if the landing page asks for your email address for the competition entry (to be deleted after the competition had run), then separately asked you for consent to receive marketing emails from you, then it would be OK?

The next page.

I wouldn't have thought that is compliant? You have to take a positive action to opt-out, by clicking the confirm button with no check boxes clicked. It also appears that you can't enter the competition without agreeing to marketing communications of some form.

[jonamv8]

Dixy said:

DELETED: Comment made by a member who's account has been deleted.

Guilty as charged
Who are ICO
I have a small specialist retail shop.
4 staff, I only respond to customers e-mails and never store them.
We contact some customers by telephone to tell them their equipment is overdue for service.
I only became aware of GDPR 4 months ago.
The most information I have had is from you, there is nothing from the state not even a multi coloured giant furry animal on tv.
This and MTD is close to making me say enough is enough..

Are you deleting your emails prior to replying? Are you deleting them in a fashion that the ICO deem acceptable? Do you have an email deletion policy LOL