Comment by miki123211
7 months ago
> If you were to ever be investigated, it will be up to someone to decide if your measures were good or you have been found lacking.
This is the problem with many European (and I guess also UK) laws.
GDPR is one notable example. Very few people actually comply with it properly. Hidden "disagree" options in cookie pop-ups and unauthorized data transfers to the US are almost everywhere, not to mention the "see personalized ads or pay" business model.
Unlike with most American laws, GDPR investigations happen through a regulator, not a privately-initiated discovery process where the suing party has an incentive to dig up as much dirt as possible, so in effect, you only get punished if you either really go overboard or are a company that the EU dislikes (which is honestly mostly just Meta at this point).
NOYB is a non governmental organisation which initiated many of the investigations against Meta. E.g. they recently filed a complaint against the social media app BeReal for not taking no for an answer and continuesly asking for permission for data collection if you decline.