05/17/2018 (Thu) 09:08:17
I've heard different opinions, but looks like this isn't very positive thing. First - it is that type of law that can be used against literally anyone because it has very wide terms. For example, even having technical logs of web server may be a target for criminal case, or even some small server apps like fail2ban can be counted as personal data processing things. Of course no one in sane mind would do this, but that is the point: having law that may be used against anyone is pretty totalitarian thing. "If we don't like you, we can easily fuck you legally and you can do nothing against it" - that is what government really thinks. So, it is easier to find another excuse to fine (or put into jail) on those whose government doesn't like.
It is really bad for small business, now they need to maintain much larger infrastructure for logging access to data etc. So, spending will increase, and then prices. Larger players like Facebook also had problems, but they have resources and time, so they'll become stronger and small companies weaker (or die). Another step to monopolization - make running own commercial web service harder. It is especially fun when going into court is costly - someone may hire a lawyer and start the process against you for messing with personal data, and even if you win, you'll spend tremendous amount of time and money in court. So, to prevent this, company would start to do different types of certifications, audits etc, i.e. transfer money from own pocket to some third-party "trusted" parasites. For some small family-owned company that has registration on site it is easier to close the site than do all that shit. Or go to some third-party service for storing personal data (that of course can be "trusted" because it will be "certified" by government and so).
Some services already gone: https://www.tunngle.net/
Will it stop Facebook or Google or someone big from selling your data to third parties? Of course no, it just is easier to you to see that they did it, although they state this almost openly in ToS already. Yes, it will be easier to delete your account (and that part also has exception that allows company to store data for long time if they need).
Looks like it is same nonsense like cookie law but now with real harm.