You should also know that hosting a service in the US without explicitly denying service to Europeans, and not abiding by the GDPR makes you liable to criminal prosecution in the US. US federal law has a version of GDPR that does not protect US citizens, just EU ones.
this post was submitted on 15 Nov 2024
345 points (99.4% liked)
You Should Know
33133 readers
14 users here now
YSK - for all the things that can make your life easier!
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
Rules (interactive)
Rule 1- All posts must begin with YSK.
All posts must begin with YSK. If you're a Mastodon user, then include YSK after @youshouldknow. This is a community to share tips and tricks that will help you improve your life.
Rule 2- Your post body text must include the reason "Why" YSK:
**In your post's text body, you must include the reason "Why" YSK: It’s helpful for readability, and informs readers about the importance of the content. **
Rule 3- Do not seek mental, medical and professional help here.
Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.
Rule 4- No self promotion or upvote-farming of any kind.
That's it.
Rule 5- No baiting or sealioning or promoting an agenda.
Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.
Rule 6- Regarding non-YSK posts.
Provided it is about the community itself, you may post non-YSK posts using the [META] tag on your post title.
Rule 7- You can't harass or disturb other members.
If you harass or discriminate against any individual member, you will be removed.
If you are a member, sympathizer or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people and you were provably vocal about your hate, then you will be banned on sight.
For further explanation, clarification and feedback about this rule, you may follow this link.
Rule 8- All comments should try to stay relevant to their parent content.
Rule 9- Reposts from other platforms are not allowed.
Let everyone have their own content.
Rule 10- The majority of bots aren't allowed to participate here.
Unless included in our Whitelist for Bots, your bot will not be allowed to participate in this community. To have your bot whitelisted, please contact the moderators for a short review.
Partnered Communities:
You can view our partnered communities list by following this link. To partner with our community and be included, you are free to message the moderators or comment on a pinned post.
Community Moderation
For inquiry on becoming a moderator of this community, you may comment on the pinned post of the time, or simply shoot a message to the current moderators.
Credits
Our icon(masterpiece) was made by @clen15!
founded 1 year ago
MODERATORS
Where can we read more about this?
It's very dry and boring legalese, but look up the EU-US Data Privacy Framework.
TL;DR: Biden signed a law last year letting EU courts enforce GDPR fines in US courts. It never happens because companies are not stupid and defend themselves in the EU courts.
It's a recent edition of a string of increasingly privacy-favouring legislation attempts by the US to placate the EU about the rights of its citizens being respected abroad. The gist of it is that it is a US federal law signed into force by Biden last year, which makes it so that EU citizens have legal standing in US courts to enforce EU GDPR court decisions. There is not a lot of precedent yet, but that's part of the point.
It precludes companies from using the loophole of not having any EU presence to evade fines and rules. Companies can and almost always exempt themselves from this by having an EU entity and subjecting themselves to GDPR directly, since if they get you through this, the EU court will already have tried and found against you, and the US federal court has little room to get you off the hook, because if they do, they risk Big Tech bottom lines by endangering EU-US data transfers.
I'm sorry, but I think you're mistaken. May I ask where you got this information?
As I understand it, the DPF is merely an executive order and not a federal law, so it's very limited in what it can do. It doesn't create the ability to enforce fines through US courts because breaking the GDPR is still perfectly legal under US law.
This loophole is still used unfortunately. For example, Clearview AI was fined by various data protection authorities, but their fines cannot be enforced so the company just never paid up.l
Europe is also leading the world in terms of progressive AI laws, something we're not likely to see in any meaningful way for some time here in the US.
yepp, but I've seen criticism about these laws holding back AI companies' development. In that they can't just steal a tonne of data and get away with it
Yeah, that's always the argument on the part of corpos: "This regulation is killing our profits, waaa waaa waaa."
I’ve seen criticism about these laws holding back AI companies’ development
These laws can't do anything these grifter-companies full of misguided attempts to mis-use LLMs and LAMs aren't doing to themselves already, tbh.
It's all just a huge bubble of C-suites blowing hot smoke up each other's arses.
Colorado has a similar AI law
Thanks for sharing these lists. There's several I hadn't heard of before
Except Lemmy. I wish luck to anyone trying to get rid of their comments when they could have been federated to any number of known and unknown servers throughout pretty much any country in the world. The legal nightmares to get it enforced basically make it a non-starter.
The right to be forgotten is a separate thing from GDPR. GDPR lets the EU go after criminals illegally using private data, like Facebook.
Edit: This is wrong. The right to be forgotten appears in Recitals 65 and 66 and in Article 17 of the GDPR.
Everything about this comment is wrong. Sincerely, Your next door former DPO
You are right. I should not comment on stuff after driving for a day straight. Thanks for correcting the record.
Very first thing on the list - support local businesses
Aye they need the support because the taxes are fucking crippling for small business 😅
But at least the taxes aren't quite so much being funnelled into "turning Palestinian toddlers into skeletons"