Not just the legal team. Every time there’s new legislation like this, a new set of contractors pop up offering to walk your company through what it needs to do to be compliant. Nobody is quite sure what the limits are–and nobody will for several years until court precedents work out the issues–so those contractors are going to tell you to assume the worst case interpretation.
PCI Compliance (technically a contractual obligation rather than legal), Sarbanes-Oxley, and GDPR were good things, but all of them spawned a sub-industry of grifters.
The California stuff still has yet to play out in courts but the European law covering it was actually pretty significant. And it was enough of a pain in the ass that they recently said they’re going to repeal it.
And it was enough of a pain in the ass that they recently said they’re going to repeal it.
Repeal the EU law? I’ve heard that they were going to tweak it, but that usually means they’ll tighten it, like when they clarified you can’t make a cookie banner with thousands of individual opt-out switches.
Is that actually true or is that just their legal team playing it overly safe? Because if it is true that’s incredibly stupid.
Not just the legal team. Every time there’s new legislation like this, a new set of contractors pop up offering to walk your company through what it needs to do to be compliant. Nobody is quite sure what the limits are–and nobody will for several years until court precedents work out the issues–so those contractors are going to tell you to assume the worst case interpretation.
PCI Compliance (technically a contractual obligation rather than legal), Sarbanes-Oxley, and GDPR were good things, but all of them spawned a sub-industry of grifters.
Is it even the legal team though? This just feels like someone playing malicious compliance.
It sounds like legal teams playing it safe. Who would go to court over such a thing?
The California stuff still has yet to play out in courts but the European law covering it was actually pretty significant. And it was enough of a pain in the ass that they recently said they’re going to repeal it.
Repeal the EU law? I’ve heard that they were going to tweak it, but that usually means they’ll tighten it, like when they clarified you can’t make a cookie banner with thousands of individual opt-out switches.