Full title: NYC is now the first city in America that bans sketchy subscriptions / As of Thursday, the city’s click-to-cancel rule has taken effect, which requires businesses to make it as easy to cancel a subscription as it is to sign up.

  • doingthestuff@lemy.lol
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    Are they going to try to force compliance on companies outside of NY? Even if they could, will we sites just block NY IP addresses? How does this work?

    • Septimaeus@infosec.pub
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 days ago

      If similar to equivalent state regs, when access to customers residing in that market is gated by compliance and subject to lawsuits or ban, the first phase of business-side operations change is immediately setting up minimum compliance workflow like a special webpage coupled with countermeasures (like proof of residency; IP historically difficult in court but has been used successfully for state-specific age gating) and boundary testing cycles. With especially large markets, however, the overhead associated with maintaining multiple separate workflows fails the efficiency test and the workflows are merged, which is how everyone tends to benefit from pro-consumer laws like GDPR.