[Cherie]

comes into force today


Have you re-signed up to all the companies who want to keep in contact with you?, it's been quite nice ignoring them all

[AnnieK]

GDPR has been the absolute bane of my life for the last couple of months. I somehow got tasked with implementing it for my company. Most companies are.no where near compliant yet and no one really understands it, including the ICO. Even up to yesterday a lot of the legal bits are still "fluid" and open to interpretation. It will become clearer now its in force.

[Toy Soldier]

Originally Posted by AnnieK

GDPR has been the absolute bane of my life for the last couple of months. I somehow got tasked with implementing it for my company. Most companies are.no where near compliant yet and no one really understands it, including the ICO. Even up to yesterday a lot of the legal bits are still "fluid" and open to interpretation. It will become clearer now its in force.

Ugh. It's even been a nightmare for me and we barely hold any customer data . Loads of compliance BS though. Oh and... Trying to get staff who it took 3 months to learn how to fold a coin bag properly to complete a mandatory online quiz on it, with randomised questions, and a 100% correct requirement to pass.

Also the GDPR Windows 10 updates ****ed up my sound card and my VPN and it took like 2 hours of my precious time to fix them

[AnnieK]

Originally Posted by Toy Soldier

Ugh. It's even been a nightmare for me and we barely hold any customer data . Loads of compliance BS though. Oh and... Trying to get staff who it took 3 months to learn how to fold a coin bag properly to complete a mandatory online quiz on it, with randomised questions, and a 100% correct requirement to pass.

Also the GDPR Windows 10 updates ****ed up my sound card and my VPN and it took like 2 hours of my precious time to fix them

Being in recruitment we hold a **** load of candidate data so my first executive decision was to delete pretty two thirds of my database.....pressing that delete button was cathartic.

[Oliver_W]

I'm on the other end of GDPR to you lot - I'm sick of getting woken by emails from companies I forgot existed telling something I don't care about. Pass on my details to advertisers I already have spamfilter, I don't care, JUST LEAVE ME ALONE

[Toy Soldier]

Originally Posted by Oliver_W

I'm on the other end of GDPR to you lot - I'm sick of getting woken by emails from companies I forgot existed telling something I don't care about. Pass on my details to advertisers I already have spamfilter, I don't care, JUST LEAVE ME ALONE

Put your phone on aeroplane mode when you go to bed. Game changer.

[James]

Last couple of days we've been discussing how this affects TiBB.

[bitontheslide]

Originally Posted by James

Last couple of days we've been discussing how this affects TiBB.

it's well worth finding out because a Ł20 million fine isn't funny

My company is GDPR compliant, but it wasn't without pain getting there

[LeatherTrumpet]

my promotions bit of gmail has been going bonkers

[Oliver_W]

Originally Posted by Toy Soldier

Put your phone on aeroplane mode when you go to bed. Game changer.

True, I wouldn't really care about any messages sent by anyone when I'm in bed, so why should they come through?

[AnnieK]

Originally Posted by James

Last couple of days we've been discussing how this affects TiBB.

At the very least you need to update the privacy policy and get everyone to consent to our personal details (emails and usernames)being held on the server.

[Cherie]

It has changed how I have to work but I didn't have to implement it I would say it was a right pain in the ass

it will be good not to be contacted by random companies though, some of the plaintive emails though like one from Virgin, this will be our last time contacting you ever if you don't sign up now..

[bitontheslide]

Originally Posted by Oliver_W

True, I wouldn't really care about any messages sent by anyone when I'm in bed, so why should they come through?

my phone has a do not disturb function that I have scheduled for quiet hours every day .... i do the same with my landline phone ... you can even exclude certain numbers so they always get through if required

[James]

Originally Posted by AnnieK

At the very least you need to update the privacy policy and get everyone to consent to our personal details (emails and usernames)being held on the server.

Yeah, the trouble it what to do about people who haven't signed-in in a long time. This forum has existed since 2001.

I don't want to send out a mass-mail to every member.

[Cherie]

Originally Posted by James

Yeah, the trouble it what to do about people who haven't signed-in in a long time. This forum has existed since 2001.

I don't want to send out a mass-mail to every member.

Delete anyone who hasn't been on in the last three years?

[AnnieK]

Originally Posted by James

Yeah, the trouble it what to do about people who haven't signed-in in a long time. This forum has existed since 2001.

I don't want to send out a mass-mail to every member.

That was my problem with some historic candidates on our database, so I deleted them. They can give consent if the come back and sign up again.

[AnnieK]

A lawyer I spoke to thinks that GDPR compliance will become the next PPI, if people are holding your data without consent, the ppi ambulance chaser type companies will threaten legal action unless you pay compensation so well worth getting it sorted before they jump on it

[Toy Soldier]

Originally Posted by AnnieK

That was my problem with some historic candidates on our database, so I deleted them. They can give consent if the come back and sign up again.

Deleting users from the database directly causes huuuuugggeeee issues with vBulletin. I would very much advise against it.

Not least; deleting a user "raw" from the database does NOT delete their posts, they are still there in the thread, and the username is still present as plain text. It DOES however detatch the user ID from the username... making that persons posts and details impossible to locate in the database, meaning that if there's personal information in those posts, and they ask for it to be gone, there's no realistic way to locate all of it.

In other words, to comply with the law you'd have to delete the entire database.

More realistically... surely the only personal data TiBB holds is email addresses? And it should in theory be possible to blank the email address field of non-current users, then mail current members for confirmation that they're ok with you storing theirs.

Would also be a good idea to delete any "members pictures" threads that contain pictures of members who are not still currently active.

For current members all you really need is a cookie pop-up that makes us click "I agree" to a tonne of disclaimers, and stores the response.

You should also prune EVERYTHING from any member you're going to permanently ban... or alternatively (and a good option IMO) instead of classic bans, move permanently banned users to a cutom usergroup that can still log in and edit their own posts, but not post new posts. That gets you out on a technicality because the user then has full access to remove / alter their own data.

[AnnieK]

Originally Posted by Toy Soldier

Deleting users from the database directly causes huuuuugggeeee issues with vBulletin. I would very much advise against it.

Not least; deleting a user "raw" from the database does NOT delete their posts, they are still there in the thread, and the username is still present as plain text. It DOES however detatch the user ID from the username... making that persons posts and details impossible to locate in the database, meaning that if there's personal information in those posts, and they ask for it to be gone, there's no realistic way to locate all of it.

In other words, to comply with the law you'd have to delete the entire database.

More realistically... surely the only personal data TiBB holds is email addresses? And it should in theory be possible to blank the email address field of non-current users, then mail current members for confirmation that they're ok with you storing theirs.

Would also be a good idea to delete any "members pictures" threads that contain pictures of members who are not still currently active.

For current members all you really need is a cookie pop-up that makes us click "I agree" to a tonne of disclaimers, and stores the response.

You should also prune EVERYTHING from any member you're going to permanently ban... or alternatively (and a good option IMO) instead of classic bans, move permanently banned users to a cutom usergroup that can still log in and edit their own posts, but not post new posts. That gets you out on a technicality because the user then has full access to remove / alter their own data.

Ahh, I am not familiar with vBulletin so was not aware of that issue with deleting. On my CRM when you delete it removes all traces of candidates from all parts of the database so once they are gone, they are gone from everything.

[parmnion]

Originally Posted by James

Last couple of days we've been discussing how this affects TiBB.

You better take away the quote function.

[AnnieK]

Me this week

[LeatherTrumpet]

I cant at the lack of a close brackets )


AAAAAAAAAAAAAAAAAAARRRRRRRRRRRRRRRRRRGGGGGGGGGGGGG GGGGHHHHHHHHHHHHHH

[kirklancaster]

Originally Posted by AnnieK

Me this week

[Ross.]

Originally Posted by James

Last couple of days we've been discussing how this affects TiBB.

Everyone getting their lawyers ready to sue TiBB?

[Tom4784]

Ugh, I had to spend two hours at work yesterday reading 4 different booklets on it (seriously, I think all together they were longer than my ****ing book.) and then I had to do a test which had nothing to do with what I read. Utter waste of time, it's all common sense anyway.

It's been nice knowing that i'm gonna get a lot less spam from companies though although it's annoying from a work perspective.