5 ms·

"it applies to any entity (any person, business, or organization) that collects or processes personal data from any person in the European Union" It should

generalizations 4y ago
HN is a US website. The EU doesn’t have jurisdiction in the US. I’m pretty sure it’s that simple.
- eddsh1994 4y ago
  You're wrong. https://www.cookiebot.com/en/gdpr-usa/#:~:text=Does%20the%20GDPR%20apply%20inside,to%20collect%20their%20personal%20data https://www.cookiebot.com/en/gdpr-usa/#:~:text=Does%20the%20....
  - generalizations 4y ago
    > The GDPR has extra-territorial scope, which means that websites outside the EU that process data of people inside the EU are obligated to comply with the GDPR. I see that site makes the same assertions about jurisdiction that the comments here are making. However, it provides no explanation for why the EU can actually claim that jurisdiction, which is my whole point. Why are they obligated? How does the EU have such authority? I say it doesn’t, for the simple reason given upthread, and you have provided no evidence to the contrary.
    - anigbrowl 4y ago
      Same reason Americans can sue companies from other countries in American courts: treaty recognition of legal judgments.
      - generalizations 4y ago
        Yeah, but AFAIK there is no such treaty.
- deleted 4y ago
  [deleted]
daveevad 4y ago
One weird GDPR implication our team considered during initial implementation of our solution was US citizens traveling to Europe, and even people visiting embassies of EU countries in the US, would seemingly trigger all applicable constraints of the legislation. Personally, I still view GDPR more akin to regulatory capture than actual consumer protections; although, I do admit, more than anything, the Internet needs more consumer protection.
bhhaskin 4y ago
Except HN doesn't collect or process personal data.
- cloudking 4y ago
  Pretty sure email addresses and user generated content (comments) are personal data.

generalizations 4y ago

HN is a US website. The EU doesn’t have jurisdiction in the US. I’m pretty sure it’s that simple.

eddsh1994 4y ago
You're wrong. https://www.cookiebot.com/en/gdpr-usa/#:~:text=Does%20the%20GDPR%20apply%20inside,to%20collect%20their%20personal%20data https://www.cookiebot.com/en/gdpr-usa/#:~:text=Does%20the%20....
- generalizations 4y ago
  > The GDPR has extra-territorial scope, which means that websites outside the EU that process data of people inside the EU are obligated to comply with the GDPR. I see that site makes the same assertions about jurisdiction that the comments here are making. However, it provides no explanation for why the EU can actually claim that jurisdiction, which is my whole point. Why are they obligated? How does the EU have such authority? I say it doesn’t, for the simple reason given upthread, and you have provided no evidence to the contrary.
  - anigbrowl 4y ago
    Same reason Americans can sue companies from other countries in American courts: treaty recognition of legal judgments.
    - generalizations 4y ago
      Yeah, but AFAIK there is no such treaty.
deleted 4y ago
[deleted]

daveevad 4y ago

One weird GDPR implication our team considered during initial implementation of our solution was US citizens traveling to Europe, and even people visiting embassies of EU countries in the US, would seemingly trigger all applicable constraints of the legislation. Personally, I still view GDPR more akin to regulatory capture than actual consumer protections; although, I do admit, more than anything, the Internet needs more consumer protection.

bhhaskin 4y ago

Except HN doesn't collect or process personal data.

cloudking 4y ago
Pretty sure email addresses and user generated content (comments) are personal data.