Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Funny thing is there are also mandatory data retention regulations that say data MUST be maintained for a certain period of time by law.

It's getting worse, but it's generally been the case that it's impossible for an individual to bootstrap a company and be 100% compliant with every law and tax regulation. You would never have any time to actually provide a product and service customers. You just do the best you can and as you get bigger you become more complaint.



GDPR just says that if you are keeping data, you have to have a good reason for it.

If you have to retain certain data for eg tax purposes, then that sounds like a good reason to me.


That's so reductionist as to be useless. What is a "good" reason? Are you a judge that will be presiding over these cases? Things like that are massive holes for litigation and the cause of all these compliance issues in the first place.


Every law will be interpreted according to its spirit, it won't be used like a hammer on anything... It's like HN suddenly discovers how a legal system works..


It has 99 articles arranged over 11 chapters. It does not "just [say] that if you are keeping data, you have to have a good reason for it".


Ok, sure. How do you interpret Article 6, section 1. Especially subsection f) ?

https://gdpr-info.eu/art-6-gdpr/


More than that, "compliance with a legal obligation" is specifically called out as one of the six legal bases for processing data.

It's like people are complaining about something they haven't taken the trouble to understand. That couldn't possibly happen HERE, the bastion of rational hacker ethic, could it?

I miss the days when "hacker ethic" meant weird Unix enthusiasts and not neolibertarian grifters...




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: