Hacker News new | ask | show | jobs
by KaiserPro 10 days ago
Everywhere.

so long as you do a DPIA, and in germany, holland and france you talk to the workers council its fair game[1].

The reason why I assert this is that we have been forced to re-make a bunch of policies around products that have AI components. Claude was a pain because everything is recorded and stored in the compliance API. WE needed to get outside legal advice specifically for that part.

[1] with caveats. Germany you need to make sure that you are not "spying" on private usage. Which is a massive pain to define.
1 comments
LtWorf 10 days ago
There is a difference between "recording" and being able to access it and review.

Being able to record doesn't imply it's legitimate to review without cause.

link
KaiserPro 10 days ago
> however you can still record what your users are doing for purposes of detecting fraud.

Which is what I asserted at the very start.

link