3 ms·
> "Furthermore the regulation also applies to organizations based outside the European Union if they collect or process personal data of EU residents." It's re
by auggierose 9y ago
> "Furthermore the regulation also applies to organizations based outside the European Union if they collect or process personal data of EU residents."
It's really not clear to me how a company like datomic would cope with that in any practical way. Are they supposed to know what kind of data their clients store??
- grzm 9y agoI agree these are important questions, and they apply equally to various offerings in AWS, Google, Microsoft, and others. It's not something specific to Datomic.
- NoNotTheDuo 9y agoI attended a GDPR session at Re:Invent this year. Basically, there's two types of organizations: data controllers and processors. Datatomic, AWS, Azure, etc. would all fall into the processors category. Amazon.com, however, would fall into the data controller category. From a processor perspective, they have their own requirements/regulations: https://aws.amazon.com/blogs/security/aws-and-the-general-data-protection-regulation/ https://aws.amazon.com/blogs/security/aws-and-the-general-da... See also: https://aws.amazon.com/compliance/eu-data-protection/ https://aws.amazon.com/compliance/eu-data-protection/ AWS/Datomic doesn't need to know what kind of data their customers store - it's up to the customer to be compliant with their part of GDPR.