logoalt Hacker News

lionkor • yesterday at 3:02 PM • 0 replies • view on HN

That's not what GDPR is. I'm assuming you don't have the time or energy to research it, so the quick summary for you is that it does actually protect your privacy and gives you easy and fast avenues to acquire the data a company has about you (in a portable format), request deletion of your personal data, and requires that you explicitly consent to any processing of your data (in detail).

If a company doesn't follow these laws, the fines are proportional to the revenue(?) of the company, so the fines can get quite existential if a company fucks up.

In practice, this is not "shoved down" my throat at all. In practice, this means that I can request companies delete all my data, and they respect this, in practice. I can also request a .zip file with all data they have of me, and I will get it within a couple of days max.

It also means that e.g. your family doctor has to have you sign a document if they want to enter your data into a system, or if that system might be accessed by a 3rd party (such as IT support).

This isn't theoretical; this works. I've requested data deletion from various companies and requested data exports from various companies (and it worked without any issues every time).

It also means that, at any company I work at that handles PII, everyone is VERY careful touching anything with PII. The fact that you have to implement data retention periods, limit the amount of data you collect and retain, etc. forces companies to respect your privacy even if they don't want to or it's inconvenient.