Dylan Beattie  🇪🇺

Are there any examples of companies who actually did that?

I say "good, maybe another company which is prepared to respect my privacy can step into the gap you leave for customers in the EU"

working as intendedhttps://twitter.com/alicemazzy/status/984494656712003585 …

Likely to backfire by hurting EU startup velocity. While EU startups spend precious early resources on implementing compliance, their competitors test their products and capture market share that finances entry into the costlier EU market.

If you mean 'loose sensitive data stored on unencrypted iot sextoys' by 'test your product' than I'm fine with the lowered startup velocity

While the GDPR might work against companies that sell a physical product in the EU, I'd expect online adult services to be more likely to be hosted and keep your data outside the EU after the GDPR. Good luck enforcing the GDPR in Russia...

If you hold the data outside the EU you must inform the user and get their explicit permission. Plus if the data transits the EU under control, from a browser say, then it will be covered.

Good luck suing a Russian, or other non-EU, company and asking the Russian courts to enforce those "musts" in a non-EU jurisdiction where GDPR is not the law of the land.

It wouldn't be me suing them. But not disclosing where the data is stored, processed and which country a company operates from will have the more useful effect of warning off users. (over time). Right now I don't want my data in Russia or many other countries, it's a Good Thing

I just hear that GDPR is ridiculous ill-thought bullshit trying to solve a problem in a way which will never help.

[citation needed]

It doesn't solve the day to day problems. Like getting 20 calls a week from recruiters (GDPR is OK with that). It doesn't do anything for things like the Cambridge Analytica problem. It's basically about as helpful as the EU Cookie directive. Has that helped you?

Nope. Your wrong it solves both those. Recital 70 is the right to object to direct processing. Article 9 disallows political and philosophical affiliation for processing. Both of those examples could be reported as a breach.

Why did you become their customer/product in the first place then, if you value your privacy that much? Were you forced to? I'm afraid the regulations like this will make people even less aware of their own privacy in the future, since they will just rely on the government.

I think this is a reasonable question with a fairly straightforward answer: at the point at which one was weighing whether or not to become a customer, the privacy loss was not visible and nor was the potential harm from it.

The end user could try gleaning risk from the privacy policy, but that's infeasible in the real world. For starters you'd have to be an expert to understand the implications, and society can't expect every single one of its citizens to be an expert on any given thing.