Are you sure that meets the letter of the law? GDPR would say “fuck that version of nuance, fix it.” Microsoft now tries filtering on Bing Copilot in Germany, to variable results. What does the relevant California law say and mean?
I am not a lawyer. But you wouldn’t be surprised to hear that
I don’t have inside story of Bing in Germany. It could be that Microsoft either doesn’t want to do it well, or hasn’t yet done it well enough. I’m not promising either in particular, but it can be done.
Generally as an engineer you have a pile of options with trade offs. You absolutely can build nuanced solutions, as often the law and the lawyers live in nuanced realities. That is the reality of even the best sorts of tech companies who are trying.
My commitment is that maximalism or strict binary assumptions won’t work on either end and don’t satisfy what anyone truly wants or needs. If we’re not careful about what it takes to move the needle, we agree with them by saying ‘it can’t be done, so it wont be done.’
My commitment is that maximalism or strict binary assumptions won’t work on either end and don’t satisfy what anyone truly wants or needs.
What’s truly lovely about GDPR is that it is maximalist, strict, and binary. For any “but…” of a corporation the GDPR answer is “fucks given: 0, this is YOUR problem, comply or perish.”
Which makes it so baffling every time a techbro fails to understand it or claims “GDPR doesn’t apply to me.” Just don’t fuck around with PII and don’t collect any without explicit permission from the user! How is this difficult?!
Are you sure that meets the letter of the law? GDPR would say “fuck that version of nuance, fix it.” Microsoft now tries filtering on Bing Copilot in Germany, to variable results. What does the relevant California law say and mean?
I am not a lawyer. But you wouldn’t be surprised to hear that
My commitment is that maximalism or strict binary assumptions won’t work on either end and don’t satisfy what anyone truly wants or needs. If we’re not careful about what it takes to move the needle, we agree with them by saying ‘it can’t be done, so it wont be done.’
What’s truly lovely about GDPR is that it is maximalist, strict, and binary. For any “but…” of a corporation the GDPR answer is “fucks given: 0, this is YOUR problem, comply or perish.”
Which makes it so baffling every time a techbro fails to understand it or claims “GDPR doesn’t apply to me.” Just don’t fuck around with PII and don’t collect any without explicit permission from the user! How is this difficult?!
I’m referring specifically to this where they could only put in a shaky bodge.
When you don’t know an example, consider looking it up and not just waffling anyway.