This is a topic I keep revisiting. It's constantly evolving, with new laws in different parts of the world happening pretty often. And also there's a lot of grey area with vague or incomprehensive language that hasn't yet been tested in courts.

I recognize that it's a bit of a niche topic, but I think there are a lot of us at Tildes who have to think about it. After all it potentially impacts anyone maintaining or building a non-platform web presence. It also applies to less obvious things like running an advertising campaign that involves media requested from a server you control (which can therefore potentially log requests).

For my part, I've needed to research laws relating to PII in order to come up with policies and practices in various contexts. In broad strokes it's pretty simple but as you get into details what I continue to find is that there are a lot of conflicting opinions both from professionals and lawyers. A lot of it is still open to interpretation.

I'm wondering what kinds of experience other tildenauts have around data protection and PII? Have you implemented solutions? Do you wonder about it for your own websites? Have you been involved with it at companies where you've worked? Do you have questions about it?

I was contacted by a recruiter regarding a job in my field but they wanted someone with data analytics skills. I'm taking this as a sign that I should improve my skill set. Does anyone have advice for where or how to start with a very small budget?

Thanks for your help.

I bought an M2 Macbook Air at the start of this year for uni. I only planned to use it for uni work as I have another 'more powerful' laptop that I use for everything else, but I kinda love the M2 and want to make it my daily driver laptop. Battery lasts for ages, screen is great, it's thin and light, etc. The problem is - as you might guess - I only got the 512GB model and if there's one thing Apple hates, it's people having control over their hardware, so no expandable storage. I can't afford to upgrade the entire laptop, so I need to work with what I have. Here's what I want to use it for:

• Graphic design: Adobe software, high-res images, typefaces, etc.
• Music production: Ableton Live 11 Suite, sample packs, plug-ins, project folders, etc.
• Music library: uncompressed .m4a files because iTunes hates Vorbis 😢, ~80% of my library (I don't have everything downloaded yet) is 25GB.
• Web-browsing: Firefox... this one isn't really relevant but I feel like I should include it for completeness.

Does anyone have any tips to stretch this 512GB as faaaaaar as it can go? I have a 2TB external SSD, but I'm wary of keeping anything important on it because it's small and I don't want to accidentally lose a bunch of stuff. I can spend a bit of money (maybe 30usd) if anyone has a good idea that requires buying something, but I can't spend any ludicrous amounts, I already did that to get the laptop!

Hi Tilderinos,

I head up a small startup and we're looking to get some support for our data security. Up until now we've worked with small mom and pops that didn't have any requirements, but a few of our new clients have full data security teams and our infrastructure and policies/protocols aren't up to snuff. We reached out to a few consulting firms and they quotes us between $80-100k to get things set up and run us through a full SOC2 review. As a small company we don't really have that type of budget, more like $40-50k. I stumbled upon Vanta and Drata as alternatives and had meetings with their sales folks last week. Both of their offerings from setting up our protocols to monitoring and getting us through a SOC2 were only $16k.

Are platform based companies like Vanta or Drata enough to get us off the ground while we're still getting set up? Has anyone worked with them before and have any feelings one way or the other? Should we be signing on with a security consulting company - be it at a lower rate if we can negotiate it?
This is all quite new to me and any insight folks here can provide would be incredible useful.