Whois vs GDPR, latest news

Seth Mattinen sethm at rollernet.us
Sat May 26 07:41:15 UTC 2018



On 5/24/18 4:21 PM, Anne P. Mitchell Esq. wrote:
> Actually, GDPR specifically requires processors to include statements of compliance right in their contracts;  we also strongly recommend that controllers insist on indemnification clauses in their contracts with processors, because if the processor screws up and there is a breach, the_controller_  can also be held liable, and the financial penalties in GDPR are very stiff.


Good luck getting multiple millions worth of fines out of small 
businesses that never even touch a million a year in revenue, let alone 
the added expenses of trying to do all the crap GDPR thinks everyone can 
suddenly afford out of nowhere.

~Seth



More information about the NANOG mailing list