On: Grindr €6.5M fined for not collecting users’ valid...

[Terry_Roll]

You can collect as much data as you like, its what you do with it that counts.

[leodriesch → Terry_Roll]

I think the less data you collect the less impact a leak or rogue employee can have.

Imagine if Hacker News would leak its user database. I assume there is not much in there, so the impact would pretty much be non existent.

[jacquesm → leodriesch]

That depends. If that user database included IP addresses I can see plenty of ways in which it could have major impact.

[_lqaf → Terry_Roll]

I mean, you can say that about residentially-stored explosives, too.

This isn't about what one can do, it is about what is prudent. Grindr just learned a lesson about the difference.

[hwers → Terry_Roll]

Unless you get a leak and people find out and your reputation is ruined.

[phoe-krk → Terry_Roll]

I don't think your statement holds true in practice. Collecting data that you then don't do anything with, in theory or even in practice, is also something that GDPR penalizes, since there's no need for you to collect it if you claim you don't do anything with it.

[Terry_Roll → phoe-krk]

Not doing something with the data is also a function, just like Nulls are a value, so yes you are right that collecting the data and not doing anything with it could be viewed negatively when up before data commissioners. Its interesting watching how the IT industry views GDPR and the advice given out by various law firms. You see unlike maths which is pure, language is vague and open to interpretation, the trick is convincing the decision maker ie data commissioner or judge that your interpretation is the correct one and not just an incorrect herd mentality sweeping the IT industry, which you see in the comments posted here and elsewhere.

[mrweasel → Terry_Roll]

Right It’s the storing and sharing part that’s a liability.