This is nothing about storage. Under the GDPR you have the "right to request" how a company is using your data, how it classifies your data, how it categorizes what it knows about you. Even if it is 100% secure, offline.
Furthermore, if it shares your personal information - like putting your name and address into a UPS or DHL shipment - you have the right to know all about that and it must answer correctly or face penalties. You also have to identify any and all jurisdictions worldwide where that information was. So if that shipment left Canada, landed in the UK, train to Belgium, truck through Germany, down into Austria - unless I know all the details (including the 4 mile stint through the Netherlands), I am not in compliance.
This is MUCH MORE than just about securing data. Read that linked letter again and think about the implications. But hey, screw business, amiright? After all, what did they ever do for you (other than offer you a job)?
Um - it's not YOUR DATA! That's the point! You GAVE that data to the company, and they are using it. Now, you might not LIKE that they are using it, but you WILLFULLY GAVE IT TO THEM and are attempting to force them to stop using what you gave them! Completely nonsensical. Or must I comply with the GDPR and basically purge all records from all EU citizens - and thus not offer the EU-required 2 year warranty, since I do not have (nor can I reasonably keep - at least on my budget scale) the original data the consumer gave me when they registered their product?
Here you go - same as I linked above. Look at the "Annual mean temperature change for hemispheres". You'll see it shows up in both hemispheres. Much like the Little Ice Age, and the Medieval Warm Period - worldwide phenomenon.
So if I run a US company, and have a US (.com) website, am I doing business in the EU if someone from the EU orders from me? If yes - then I need to essentially stop all sales to the EU. If not - then how does this apply to any company without a physical presence in and/or a country domain of the EU?
Per the GDPR FAQ, your name and e-mail address - basics kind of needed to ship you another product and notify you of shipment - are all they need to store. It's not all your personal data, just your name and e-mail address.
Here's a legal GDPR request that would be extremely onerous for someone using Quickbooks Online. Or Zoho One. Or any other online accounting/sales-lead package. Do you KNOW with certainty, where all the online stored data you've ever had over the last 12 months is really stored? Is it only in the US, Germany, or Japan? Are you certain it never existed - even for a microsecond - in a different country's server? Because if you're wrong - you violated the GDPR and are now subject to fines of 20MM Euros or 4% of revenues - whichever is higher.
FALSE. The ONLY place "large scale systematic monitoring" is referenced on your FAQ page is "do I need a Data Protection Officer". It says NOTHING about those who still have controlled/regulated data (names and e-mail addresses) being exempt from the GDPR. Nothing. it simply says that if you do "large scale systematic monitoring" (which isn't really clarified in the first place; is that 100 people? 1000? 10K? 1MM?) need a DPO.
What constitutes personal data?
Any information related to a natural person or ‘Data Subject’, that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer IP address.
So that mom-and-pop shop with your name or e-mail address is completely subject to these regulations. I guess we cannot keep tracking numbers, invoice records, etc.
Of course, Mr. IRS (or your country's equivalent) doesn't look kindly on NOT having records of where the money came from, especially if they're a repeat or larger customer. I'm sure Mr. IRS will waive any and all actions on me if I say "I make everything a 100% cash sale and a 100% cash purchase so I do not store any data and do not fall afoul of the GDPR; trust me that this is the right amount of money coming in and out and it wasn't gathered/used for nefarious means".
Looking at the page you link, it says anything that can identify an individual - including an e-mail address or name - is under the auspices of the GDPR. So that mom and pop shop, who keeps a record of who bought from them in their Quickbooks account, is not subject to the GDPR. Additionally, since they most likely control/own the data AND use it for looking up "who bought the last version of this product", they are the controller and processor and thus are subject to all aspects of the GDPR.
Tell me, what of my personal data beyond billing and shipping data for my most recent order would a Mom and Pop shop need?
I run a small "mom and pop" shop (well, 5 people). We track all your orders - and all your contacts. We track if you've "liked" or followed anything on our social media. And then we'll send you updates on new offerings and events that are targeted to what you've ordered in the past as well as what you've liked/followed. It proves to yield a higher level of follow-on sales.
Thankfully, we don't have any EU dealers/distributors yet, so we'll just go ahead and focus on North America and Asia, instead. After all, the future IS Asia - half the world's population lives in India, China, and SE Asia, and they're all loving from 3rd and 2nd world status to 1st and 2nd, and have money to start consuming.
Most data models smooth the peak in 1930s; I wasn't claiming it was higher than today, just that it happened in the 30s, then we had significant cooling until the mid 70s, then heat again. A lot of models and data smooth out - eliminate that peak in the 1930s. Look at the hemispherical data from GISS, you'll see a peak - worldwide - up to ~1941, then a drop until ~1975.
What happens when we went from 400 to 410? The GP - way back, about 5 posts ago - said it was a "sucker punch". So what did the increase from 400 to 410 sucker punch humanity, if in fact we usually live at levels quite a ways above that?
No, I'm not mixing them up, RealClimate claims the Curry states ~1 to ~2.5, so in that case they must be referencing TCR - which is thus what I talked about. If you want to talk about ECS, the IPCC (as I linked above) believes it is much higher than than 2.1 to 4.4 per their own words. Yet no data supports such a conclusion...
One data set hasn't completely smoothed it away, and still shows the spike during the 30s for the Northern and Southern hemispheres... That would be global, yes?
So you trust the models, rather than the data? Show a dataset (one that is not "adjusted" every year, and still leaves the actual heat peak back in the 1930s) that correlates with the models. You won't find one, unless it is so massaged that the big peak back in the 1930s is gone. And note my signature quote - that's from Phil Jones, no AGW skeptic himself. If the dataset you're using doesn't show those two periods as basically the same - it's been massaged and tweaked to yield a pre-determined answer, rather than stand on its own in opposition to the desired models...
Huh? The IPCC says the range of 2.1 to 4.4 deg K is too low, yet the data (as empirically calculated by Curry and others) shows the sensitivity to be less than half of that. And the actual models all run hot as confirmed with actual data (see the earlier link to Spencer et al). Current trends are well below what the IPCC models estimated.
Slashdot Mirror
This is nothing about storage. Under the GDPR you have the "right to request" how a company is using your data, how it classifies your data, how it categorizes what it knows about you. Even if it is 100% secure, offline.
Furthermore, if it shares your personal information - like putting your name and address into a UPS or DHL shipment - you have the right to know all about that and it must answer correctly or face penalties. You also have to identify any and all jurisdictions worldwide where that information was. So if that shipment left Canada, landed in the UK, train to Belgium, truck through Germany, down into Austria - unless I know all the details (including the 4 mile stint through the Netherlands), I am not in compliance.
This is MUCH MORE than just about securing data. Read that linked letter again and think about the implications. But hey, screw business, amiright? After all, what did they ever do for you (other than offer you a job)?
Don't worry, Mother State will take care of you!
Um - it's not YOUR DATA! That's the point! You GAVE that data to the company, and they are using it. Now, you might not LIKE that they are using it, but you WILLFULLY GAVE IT TO THEM and are attempting to force them to stop using what you gave them! Completely nonsensical. Or must I comply with the GDPR and basically purge all records from all EU citizens - and thus not offer the EU-required 2 year warranty, since I do not have (nor can I reasonably keep - at least on my budget scale) the original data the consumer gave me when they registered their product?
Cool, so as long as some EU bureaucrat is not on an anti-US tear, I can keep the US-required information in my system. Otherwise I may be SOL!
What will be the sucker punch, then? If the rise form 280 to 410 has been a nothingburger - what about the rise from 410 to 540?
Here you go - same as I linked above. Look at the "Annual mean temperature change for hemispheres". You'll see it shows up in both hemispheres. Much like the Little Ice Age, and the Medieval Warm Period - worldwide phenomenon.
Nice! Let's make the lawyers even richer by paying them to defend us against the rules they wrote!
That states when you MUST have a DPO; it does not absolve you of a DPO in all other cases.
And yet my country requires that I keep all that information for a minimum of 7 years. So it seems a lot simpler to just cut off any and all sales to the EU.
So if I run a US company, and have a US (.com) website, am I doing business in the EU if someone from the EU orders from me? If yes - then I need to essentially stop all sales to the EU. If not - then how does this apply to any company without a physical presence in and/or a country domain of the EU?
Per the GDPR FAQ, your name and e-mail address - basics kind of needed to ship you another product and notify you of shipment - are all they need to store. It's not all your personal data, just your name and e-mail address.
Here's a legal GDPR request that would be extremely onerous for someone using Quickbooks Online. Or Zoho One. Or any other online accounting/sales-lead package. Do you KNOW with certainty, where all the online stored data you've ever had over the last 12 months is really stored? Is it only in the US, Germany, or Japan? Are you certain it never existed - even for a microsecond - in a different country's server? Because if you're wrong - you violated the GDPR and are now subject to fines of 20MM Euros or 4% of revenues - whichever is higher.
FALSE. The ONLY place "large scale systematic monitoring" is referenced on your FAQ page is "do I need a Data Protection Officer". It says NOTHING about those who still have controlled/regulated data (names and e-mail addresses) being exempt from the GDPR. Nothing. it simply says that if you do "large scale systematic monitoring" (which isn't really clarified in the first place; is that 100 people? 1000? 10K? 1MM?) need a DPO.
From your link:
What constitutes personal data?
Any information related to a natural person or ‘Data Subject’, that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer IP address.
So that mom-and-pop shop with your name or e-mail address is completely subject to these regulations. I guess we cannot keep tracking numbers, invoice records, etc.
Of course, Mr. IRS (or your country's equivalent) doesn't look kindly on NOT having records of where the money came from, especially if they're a repeat or larger customer. I'm sure Mr. IRS will waive any and all actions on me if I say "I make everything a 100% cash sale and a 100% cash purchase so I do not store any data and do not fall afoul of the GDPR; trust me that this is the right amount of money coming in and out and it wasn't gathered/used for nefarious means".
Looking at the page you link, it says anything that can identify an individual - including an e-mail address or name - is under the auspices of the GDPR. So that mom and pop shop, who keeps a record of who bought from them in their Quickbooks account, is not subject to the GDPR. Additionally, since they most likely control/own the data AND use it for looking up "who bought the last version of this product", they are the controller and processor and thus are subject to all aspects of the GDPR.
Tell me, what of my personal data beyond billing and shipping data for my most recent order would a Mom and Pop shop need?
I run a small "mom and pop" shop (well, 5 people). We track all your orders - and all your contacts. We track if you've "liked" or followed anything on our social media. And then we'll send you updates on new offerings and events that are targeted to what you've ordered in the past as well as what you've liked/followed. It proves to yield a higher level of follow-on sales.
Thankfully, we don't have any EU dealers/distributors yet, so we'll just go ahead and focus on North America and Asia, instead. After all, the future IS Asia - half the world's population lives in India, China, and SE Asia, and they're all loving from 3rd and 2nd world status to 1st and 2nd, and have money to start consuming.
Data shows it was global and nearly a decade in duration.
What has happened since the increase from 280 to 410? Specifics, please. What has been the sucker punch?
Most data models smooth the peak in 1930s; I wasn't claiming it was higher than today, just that it happened in the 30s, then we had significant cooling until the mid 70s, then heat again. A lot of models and data smooth out - eliminate that peak in the 1930s. Look at the hemispherical data from GISS, you'll see a peak - worldwide - up to ~1941, then a drop until ~1975.
What happens when we went from 400 to 410? The GP - way back, about 5 posts ago - said it was a "sucker punch". So what did the increase from 400 to 410 sucker punch humanity, if in fact we usually live at levels quite a ways above that?
No, I'm not mixing them up, RealClimate claims the Curry states ~1 to ~2.5, so in that case they must be referencing TCR - which is thus what I talked about. If you want to talk about ECS, the IPCC (as I linked above) believes it is much higher than than 2.1 to 4.4 per their own words. Yet no data supports such a conclusion...
One data set hasn't completely smoothed it away, and still shows the spike during the 30s for the Northern and Southern hemispheres... That would be global, yes?
Which is a Shane, because this is exactly the sort of law that should be implemented world wide.
For example, I should be able to unsubscribe from a service without having to worry about my data being accessed by an intruder years later.
Well, it's closer to a Roger, but we get your general idea...
So you trust the models, rather than the data? Show a dataset (one that is not "adjusted" every year, and still leaves the actual heat peak back in the 1930s) that correlates with the models. You won't find one, unless it is so massaged that the big peak back in the 1930s is gone. And note my signature quote - that's from Phil Jones, no AGW skeptic himself. If the dataset you're using doesn't show those two periods as basically the same - it's been massaged and tweaked to yield a pre-determined answer, rather than stand on its own in opposition to the desired models...
Huh? The IPCC says the range of 2.1 to 4.4 deg K is too low, yet the data (as empirically calculated by Curry and others) shows the sensitivity to be less than half of that. And the actual models all run hot as confirmed with actual data (see the earlier link to Spencer et al). Current trends are well below what the IPCC models estimated.