Thread · 3 tweets · 1 Feb 2023

Yes, ePD is stupidly strict and the exemptions don't have any logic to them apart from "someone at a DPA thought it was OK at some point." For instance, load balancing isn't a user feature, you *could* deliver a shit service without. Yet it's always exempted.

But if you start to include things that the site needs to do in order not just to deliver a service but actually one that's not shit, then you need to exempt more than just that (arguably up to some limited degree of analytics).

At the end of the day, this is pretty bad regulatory structure... It makes harmless things and stupidly dangerous things the same. The requirements should be on the tech to do this right (eg. on browsers).