CRA

Posted Jan 5, 2026 9:49 UTC (Mon) by kleptog (subscriber, #1183)
In reply to: CRA by linuxrocks123
Parent article: Kroah-Hartman: Linux kernel security work

> Many of these stupid Internet laws, such as California's, allow civil suits for monetary damages.

I looked this up and it's interesting. The California law has statutory damages (which the EU doesn't) and allows for class actions (which we don't really have here in most member states*) and the combination leads to the interesting business case where you can start a class action against some site and claim statutory damages for a whole bunch of people who don't care and have no actual damages.

So yeah, the statutory damages thing does make California especially risky.

* We don't have class actions in NL, the way this is handled is to start a non-profit association that does a test case on behalf of its members and if they win they use that as leverage to settle the rest of the cases. This is the implementation of the Representative Actions Directive (2020/1828)