Hacker News new | ask | show | jobs
by cyberrock 61 days ago
People signing up for newsletters (which this site has) then immediately submitting a SAR was an unsolved issue until ECJ finally ruled against it last month [0]. I think you're missing a few steps there. It would be nice if we lived in a world where legal compliance automatically conferred legal immunity.

[0] https://www.heise.de/en/news/GDPR-ECJ-curbs-systematic-abuse...
2 comments
vidarh 61 days ago
A subject access request if you just have a mailing list sign-up would require you to provide the information in that mailing-list sign-up and information of how you have processed it. Nothing more, unless you in fact also store other information on a user behind their back.

So, no, it was not an unsolved issue: Just respond. The court case resolved the situation where a company didn't respond, but the request was potentially abusive. Nothing that and legitimate requests are both solved by simply responding.

link
latexr 61 days ago
> which this site has

It’s not clear to me which site “this” refers too.

> I think you're missing a few steps there.

I mean, yeah, I thought the format of the reply made it clear it was a joke. The larger point is that compliance isn’t that complicated and only becomes hard if you are invasive. When you’re not invasive it’s actually fairly simple.

> It would be nice if we lived in a world where legal compliance automatically conferred legal immunity.

It probably wouldn’t, because that would mean anyone violating the spirit of a law would be exempt from consequences by adhering to its letter.

link