Friday, March 23, 2018

Sex Trafficking and GDPR

The U.S. Congress passed a law to make organizations liable if they host sex trafficking content.

Craigslist said "Fine.  We are no longer hosting personal ads."

https://www.theverge.com/2018/3/23/17155110/craigslist-personal-ads-anti-sex-trafficking-bill

Some EU Organization (they truly have so many it is Orwellian) passed the GDPR in 2016 and it goes into full effect on May 28, 2018.
  • Companies are reacting by essentially telling their users to accept our terms and our marketing to you or else you can't be in our program or use our software.
  • Data processing companies are modifying privacy policies and contract terms to essentially say "our terms will be GDPR compliant, we'll change our terms so that those terms are now our global terms and, by the way, you can totally forget negotiating any different terms so take them or leave them but you can't use our services if you do not accept our terms which we will in no way be changing for you."
  • Data processing companies are clearly stating that "the data you put in our system while you use it is your data but the data we collect about you while you're using our systems/services is 'our' data about you and we need to keep that so we will not be removing even if you request to 'be forgotten'."
Businesses will almost never be forced into responding the way you wish they will.

They will simply quit operating in that business or, more likely, simply say "If you don't play by our rules then you don't play."

Remember Y2K and all of the money thrown at the tech industry during the run-up?  That is a pittance compared to the money that will be spent globally on GDPR but with GDPR the money is primarily going to go to lawyers and primarily come from customers.

Gonna' be interesting.