[stephenson]

There are positive and negative impacts of GDPR. Yes, poorly implemented consent is annoying, but forcing companies to use time and energy on privacy is super positive.

I have spent the last nine months in a few different co-working spaces here in Denmark, and all startups there have informed and essential conversations about handling users data. Just a few years ago that would never have been a topic. For me that's a very positive change.

[NeedMoreTea]

There's been a whole bunch of unexpected benefits.

Physical junk mail has noticeably gone down. So much so the Royal Mail issued a profit warning because GDPR had decreased total volume 10% or some such. Well that was unexpected, but grounds for flags and parties by itself.

> Just a few years ago that would never have been a topic

Really? I remember discussions at UK startups and larger places I worked about whether such and such was a part of the Data Protection 1998, whether some data should exist, or whether we were covered by the regs at all.

Far as I can see the big positives of GDPR are the tidying up and extending what constitutes personal data and plugging some of the loopholes. That and the max penalty has been increased enough to hope multinationals start caring too.

[Mirioron]

>but forcing companies to use time and energy on privacy is super positive.

Until you find out that for some reason your country/region has far fewer strong internet companies than other regions of the world. Then you realize that you effectively shot your own economy in the foot.

[stephenson]

Can you elaborate?

[tobylane]

These companies grew up with local data protection laws. UK's Data Protection Act 2018 implemented GDPR, repealing the DPA of 1998, which repealed the DPA of 1984.

[stavros]

I am no longer afraid of entering contests that ask for my email address, as the GDPR means that they can't spam me with their crap afterwards. To me, the GDPR has been extremely positive so far, and I don't consider having to think about the privacy of the users of my apps a bad thing (I was doing it anyway).

Article 13, on the other hand, can go fuck itself.

[kjar]

do you care to elaborate without expletives?

[Mirioron]

Why do you think you can trust the people that handle the data just because it's illegal to do something in Europe? If the entity running the website or handling the data is outside of EU jurisdiction then they can take all of your data and there would be no repercussions for them. It's also possible that you agree in some step to having your data used or your data falls under one of the exceptions. GDPR is feel-good legislation first and foremost.