6 ms·

At least for European customers. This won’t help everyone.

gberger 9y ago
How is "European customer" defined? If someone is not European but resides in Europe, do they have this right? If someone not from Europe travels to Europe and issues the request while inside Europe, do they have this right? (If so, would using a VPN work?)
- nieksand 9y ago
  I recently went to a GDPR seminar and the presenter claimed that GDPR applies to everybody physically in the EU (even tourists while they are passing through).
- adtac 9y ago
  If that's actually the case, I can see a Deletion-as-a-service business. "We thoroughly delete your account for you." The fact that I have to come up such mechanisms is a damning indictment of the way things are.
  - AckSyn 9y ago
    There used to be a service like this for facebook and twitter, then those two services blocked them from doing so. Which was sad, but it ultimately worked well for everyone who ended up using it before the ban. It would untag you from photos, delete your comments, wall posts, photos, information, change your name, and issue a deletion after changing your password (and emailing that to you).
  - davesque 9y ago
    I really don't get why AckSyn's comment was marked dead.
- eesmith 9y ago
  GDPR = https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://en.wikipedia.org/wiki/General_Data_Protection_Regula... > a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). It also addresses the export of personal data outside the EU. The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. Emphasis mine. Full text at http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:320... . > The protection afforded by this Regulation should apply to natural persons, whatever their nationality or place of residence, in relation to the processing of their personal data. This Regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person. The specific clause concerning customers appears to be: > In order to determine whether such a controller or processor is offering goods or services to data subjects who are in the Union, it should be ascertained whether it is apparent that the controller or processor envisages offering services to data subjects in one or more Member States in the Union. Whereas the mere accessibility of the controller's, processor's or an intermediary's website in the Union, of an email address or of other contact details, or the use of a language generally used in the third country where the controller is established, is insufficient to ascertain such intention, factors such as the use of a language or a currency generally used in one or more Member States with the possibility of ordering goods and services in that other language, or the mentioning of customers or users who are in the Union, may make it apparent that the controller envisages offering goods or services to data subjects in the Union. Regarding non-resident visitors, I can't tell. The directive says "whatever their ... place of residence" so almost certainly yes. It also contains text like "data subjects residing on its territory" so you might have problems lodging a complaint if you aren't a resident.
ocdtrekkie 9y ago
The US needs to grow some backbone and pass equivalent privacy (and antitrust, while they're at it) laws. If something is a certain way in both the US and EU, most tech companies won't bother doing any differently worldwide.
- _jal 9y ago
  It isn't a matter of backbone. Legislators are simply representing the interests of their customers, such as Experian and Facebook.
  - jononor 9y ago
    This seems incompatible with democracy.
    - stevenwoo 9y ago
      We can blame/credit the Citizens United Supreme Court decision.
      - paradoja 9y ago
        I guess the problems started much earlier, and that court decision was actually a result of such issues.
kristianc 9y ago
GDPR refers to any business that transacts with the European Union, so businesses outside the EU (and the UK) are included.

How is "European customer" defined? If someone is not European but resides in Europe, do they have this right? If someone not from Europe travels to Europe and issues the request while inside Europe, do they have this right? (If so, would using a VPN work?)

nieksand 9y ago
I recently went to a GDPR seminar and the presenter claimed that GDPR applies to everybody physically in the EU (even tourists while they are passing through).
adtac 9y ago
If that's actually the case, I can see a Deletion-as-a-service business. "We thoroughly delete your account for you." The fact that I have to come up such mechanisms is a damning indictment of the way things are.
- AckSyn 9y ago
  There used to be a service like this for facebook and twitter, then those two services blocked them from doing so. Which was sad, but it ultimately worked well for everyone who ended up using it before the ban. It would untag you from photos, delete your comments, wall posts, photos, information, change your name, and issue a deletion after changing your password (and emailing that to you).
- davesque 9y ago
  I really don't get why AckSyn's comment was marked dead.
eesmith 9y ago
GDPR = https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://en.wikipedia.org/wiki/General_Data_Protection_Regula... > a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). It also addresses the export of personal data outside the EU. The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. Emphasis mine. Full text at http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:320... . > The protection afforded by this Regulation should apply to natural persons, whatever their nationality or place of residence, in relation to the processing of their personal data. This Regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person. The specific clause concerning customers appears to be: > In order to determine whether such a controller or processor is offering goods or services to data subjects who are in the Union, it should be ascertained whether it is apparent that the controller or processor envisages offering services to data subjects in one or more Member States in the Union. Whereas the mere accessibility of the controller's, processor's or an intermediary's website in the Union, of an email address or of other contact details, or the use of a language generally used in the third country where the controller is established, is insufficient to ascertain such intention, factors such as the use of a language or a currency generally used in one or more Member States with the possibility of ordering goods and services in that other language, or the mentioning of customers or users who are in the Union, may make it apparent that the controller envisages offering goods or services to data subjects in the Union. Regarding non-resident visitors, I can't tell. The directive says "whatever their ... place of residence" so almost certainly yes. It also contains text like "data subjects residing on its territory" so you might have problems lodging a complaint if you aren't a resident.

ocdtrekkie 9y ago

The US needs to grow some backbone and pass equivalent privacy (and antitrust, while they're at it) laws. If something is a certain way in both the US and EU, most tech companies won't bother doing any differently worldwide.

_jal 9y ago
It isn't a matter of backbone. Legislators are simply representing the interests of their customers, such as Experian and Facebook.
- jononor 9y ago
  This seems incompatible with democracy.
  - stevenwoo 9y ago
    We can blame/credit the Citizens United Supreme Court decision.
    - paradoja 9y ago
      I guess the problems started much earlier, and that court decision was actually a result of such issues.

kristianc 9y ago

GDPR refers to any business that transacts with the European Union, so businesses outside the EU (and the UK) are included.