• MonkeMischief@lemmy.today
    link
    fedilink
    arrow-up
    1
    ·
    5 hours ago

    …if you do it wrong you can bring your entire organization down.

    In theory, but also we just don’t hear of this actually happening to organizations very much. Why? (I could be wrong, I don’t constantly dig through news to find instances of this happening.)

    Everything from tax issues to personal data retention and protection policy gets overlooked all the time, with very real consequences, and we don’t hear of those organizations getting “taken down” for it. (Like when Equifax lost all our Pii and were just like ‘whoops.’ They’re still forcibly embedded in our lives anyway.)

    Maybe this would get used to bring down a tiny small business if it caught legal attention, but anything larger could likely shrug it off.

    Organizations don’t seem to bother with such inconveniences unless it’s actively enforced and audited. Is California really going to do that with this? Seems like it’d be prohibitively expensive.

    So it’s just a little weird to me when legislation is proposed to infringe on end-users and suddenly there’s this huge rush to “get compliant” ahead of time. It seems like a lot less IT due diligence and more virtue-signaling agreeance with totalitarian politics.