Wow, I have to admit I didn't expect that large an effect.
Even if that were the only effect of GDPR, I think we could already chalk it up as a huge win, but it won't be. The recent news about German anti-trust regulators using very GDPR-like language to forbid Facebook data gathering/correlating, but with the additional teeth of anti-trust, is also a good sign.
I also saw that less than 100 fines were levied, so for now a rate of 600:1 breaches:fines.
Exactly. I think the ratio reflects this very sensible approach. It always seemed sensible to me, but it's good to see the data confirm that, in a rough way.
Even if data-breaches are not punished, we can still shame them and avoid using their product, which is a major step up from the old status quo where actively hiding the breach to avoid bad press was a legitimate strategy with very little downside.
what this creates at actual companies: PMs making $250k+ per year to sit on their asses and read about GDPR and tell you whether or not to post comms and whether you should do encryption without knowing any details about it
Even if that were the only effect of GDPR, I think we could already chalk it up as a huge win, but it won't be. The recent news about German anti-trust regulators using very GDPR-like language to forbid Facebook data gathering/correlating, but with the additional teeth of anti-trust, is also a good sign.
I also saw that less than 100 fines were levied, so for now a rate of 600:1 breaches:fines.