|
Please except mine, belatedly.
What ever you do, don't offer a New Zealander a hug. I have met two or three who were offended at being asked if they were Australian. Something like this would certainly send them right over the edge. I think they were a two cent stamp short of going postal already though.
|
|
|
|
|
Here's a belated hug with two pats on the back.
|
|
|
|
|
![Heart | [heart]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/love.gif)
Software Zen: delete this;
|
|
|
|
|
If another forum better then the lounge for this, let me know.
What are the GDPR rules for my Lightbulb indication software?
So given I have a bunch of lightbulbs that will connect over the internet to a web server, which you can log into in a brower to see gathered on/off states of your lightbulbs.
now in the server side of things, you can mark up the lightbulbs as much as you want. Meaning you can put in say lightbulb 1365 is in Room: Billys Room, at 14 Acre Road, London.
The sensor only transmit out its ID and state of on/off. It has no location information.
So the discussion, in my view, is left to the user to put in what every details they want.
What obligations do I need to get consent from to indicate that the service provide (me) needs to get?
A side from clear sign up indication like: The details you choose to enter are totatly up to you. All sensor data is clear of GEO Location or specific details. Details entered only stored on service side, and used on your report pages.
Not even understood the cookie thing, because to remove the message that you don't want cookie tracking, you would keep that information in a cookie so you dont prompt the user constantly.
|
|
|
|
|
I'm not a lawyer, but I seriously doubt the GDPR regulations would extend to users typing PII into random text boxes. You're not asking for their personal details; I'd hope you can't be held responsible if your users go out of their way to give you their details anyway.
"I posted my wallet through your letterbox; now I'm going to sue you for stealing my wallet, because it's in your house!"
Of course, like all similar laws (including the "cookie law"), I'm sure it will make lots of pointless work for SMEs, whilst doing bollock-all to stop the kinds of abuses that users actually care about.
And I must be getting old, because I find the whole concept of IoT light-bulbs ludicrous! 
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Richard Deeming wrote: And I must be getting old, because I find the whole concept of IoT light-bulbs ludicrous!
What IoT really needs is: this[^] or this[^]
Signature ready for installation. Please Reboot now.
|
|
|
|
|
How about the remote file shredder?
(Proposed as an April fool's joke by I-can't-remember-who)
Ad astra - both ways!
|
|
|
|
|
that only due to changing my real product to something else that is similar like, for the purpose of the GDPR (General Data Prolonged Rain).
And before you ask, no it's not a killer robot toy.
|
|
|
|
|
General Programming, add tags for Hardware & Devices.
But you may want to be more specific on the hardware, and programming language/interfaces.
Signature ready for installation. Please Reboot now.
|
|
|
|
|
|
Who wrote that document? It's so clear that I am amazed -- did not expect that. 
Also, before I read that I thought GDPR was more stupid legislation that would mostly stifle innovation.
However, that document really makes things clear that it is about stopping people from collecting data from you without your consent and making it far more clear when they do collect data from you.
Thanks for posting that. Very good.
|
|
|
|
|
I can assure you that the official EU document is exactly what you would expect.
Oh, and it will stifle certain types of innovation. Farcebook is moving its stored data away from the EU. 
|
|
|
|
|
GDPR is a big hairy mess that many people are doing what they can, within their means, and just hoping and praying.
You need to
- Demonstrate you are controlling access to your data. Only those who should get access get access, and only to the data they need
- Demonstrate you are securing your data. Eg if someone hacks your system and gets your data, personal info is still safe due to encryption
- Provide your users with the ability to be forgotten. That means every single piece of personally identifiable info about them, including IP address (including in web logs) must be purged on request
- Provide data portability: your users need to be able to access the data you have on them and be able to send it in legible form to someone else
- Announce if you've had a data breach
The devil's in the details. Good luck.
cheers
Chris Maunder
|
|
|
|
|
So, in every point things you would want to know from your outsourcing company. Right?
|
|
|
|
|
I'm sure it's causing a few coronary episodes among data providers.
cheers
Chris Maunder
|
|
|
|
|
I'm sure it does. But is that a bad thing? It makes them straighten up their business.
|
|
|
|
|
That all sounds eminently sensible for me, and a long overdue rebalance of rights in favour of the consumer. The recent Cambridge Analytica/Facebook fiasco should be sufficient evidence of the need for this.
"If you don't fail at least 90 percent of the time, you're not aiming high enough."
Alan Kay.
|
|
|
|
|
It is all common sense. Except it's hard. It's like they want to make a car 100% safe and have zero fatalities, but they also want a car that people actually enjoy driving and more important, want to buy.
Take backups as an example. Backups contain Personally Identifiable Info (PII). If someone requests to be forgotten then they need to be purged everywhere. EVERYWHERE. Except who is going to go and screw around with their backups to purge data from backups? You'd want to make a backup before such a dangerous operation, right?
It's also a little vague. It talks about a Data Subject not EU citizen, and the consensus is that this means anyone in the EU. So an Australian on holidays to the EU has the rights the GDPR instills simply by being in the EU. However, how do you prove someone's actually in the EU when they make a right to be forgotten request? What if they access the internet via a VPN or Proxy that's based in the States? Essentially you have assume the GDPR applies to everyone on the planet.
Given that there are about 100 of these types of regulations around it's become the case that you have to cater to the lowest common denominater. The burden on companies who are honestly trying to do the right thing and are barely making it through their day dealing with their actual business is overwhelming. They basically live with the Sword of Damocles hanging over them.
cheers
Chris Maunder
|
|
|
|
|
Hi,
In the community lounge, under the Non-English Language sub-section I am seeing only two Sub-topics Indian and Chinese, do other Country or Continent users see different topics than me being Indian? Why don't we have sub-topics for other Countries too? Just checking
Thanks,
Abdul Aleem
"There is already enough hatred in the world lets spread love, compassion and affection."
|
|
|
|
|
Nope, just Indian and Chinese - because we have a large community of both.
If a community was popular enough or big enough and asked the admins nicely I'm sure they would add one or two.
But adding random forums that don't get any traffic on the off chance they might get used doesn't make a lot of sense.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Not enough numbers to sustain other languages, often ends us just one person talking to themselves.
Anyway here in the lounge other languages do appear from time to time, last month alone I've seen German, Dutch, Spanish, French, Latin, not to forget a fair few different flavours of English.
Signature ready for installation. Please Reboot now.
|
|
|
|
|
Lopatir wrote: often ends us just one person talking to themselves.
and every now an then, this occurs in the Lounge as well. 
|
|
|
|
|
Most Lounge posts are best read in their original Klingon.
Software Zen: delete this;
|
|
|
|
|
Hab SoSlI' Quch!
Heghlu'meH QaQ jajvam!
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
OriginalGriff wrote: Hab SoSlI' Quch!
qup berries largh vavlI'OriginalGriff wrote: Heghlu'meH QaQ jajvam!
HISlaH
Software Zen: delete this;
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
