|
|
|
|
|
by tetromino_
3015 days ago
|
|
A person earning minimum wage may be concerned about all sorts of things, and the degree of his concern can be entirely unrelated to (1) the likelihood of the concern being legitimate, (2) the potential monetary harm to the person, (3) the cost to society of investigating and reporting on it, and (4) how fairly this cost is allocated. It is utterly unfair to compare subsidized access to an employment tribunal (potential harm: months of undeserved unemployment, loss of home and possessions; cost of investigation: spread across the entire nation's taxpayers) to almost-free access to your GDPR privacy report (potential harm: a little bit of mental discomfort; cost of investigation: borne by one organization, potentially ruinous for a small business or solo project). |
|
Companies storing and losing PII have a huge negative impact on the affected users, like e.g. credit card fraud or tax refund scams. This bears a huge actual cost to the victims, either because they never get back the stolen money, or because they need to invest significant time and expenses to fight for it.
A company trying to make money of my PII should better be prepared to handle it securely and to delete it upon request. Handling of GDPR requests must be calculated by them as part of the data handling expenses.