4 ms·

If you have a customer from the EU, you must comply with GPDR. Full stop. Also, if any component of your cloud ecosystem(AWS, GCS, etc.) are based in the EU, y

by debt 9y ago

If you have a customer from the EU, you must comply with GPDR. Full stop. Also, if any component of your cloud ecosystem(AWS, GCS, etc.) are based in the EU, you must comply with GPDR. Which in today's world means almost everyone is affected by this. Make sure those "American" platforms you speak have every single component of their infrastructure based physically in America. The whole thing may be difficult to enforce, but meh why risk it?

tlrobinson 9y ago
So what's the definition of "customer from the EU"?
- jacquesm 9y ago
  In the typical web/e-commerce context someone whose IP address geolocates to an EU based end point or someone who lists their delivery address as inside the union.
  - TomMarius 9y ago
    The problem is that the law applies to them even if they use a proxy. If they report/sue you afterwards, you might be looking at a huge amount of trouble.
    - jacquesm 9y ago
      Yes, but like with all this stuff: Your intent to comply with the law carries a lot more weight than actual compliance in edge cases.
      - prewett 9y ago
        That's not very comforting when your goal is avoid having unforeseen problems like being arrested on your European vacation due to violating a law that doesn't apply to your country but you still violated because it applies to all EU citizens regardless of their geographical location.
        jacquesm 9y ago
        This has never happened as far as I can detect. The only country that does this sort of thing is the US.
        s73v3r_ 9y ago
        If you're that worried, then stop scooping up every bit of data you find. Start asking if you actually need it.
        TheCoelacanth 9y ago
        > it applies to all EU citizens regardless of their geographical location It does not. Article 3[1] clearly limits it to people in the EU. It says nothing about applying to EU citizens. [1] https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/
    - wang_li 9y ago
      People will just add a checkbox that the customer must check to complete the transaction: [] I affirm that I an not an EU citizen.
      - TomMarius 9y ago
        That's not possible according to GDPR. Edit: downvotes? Really? Did you guys read the law at all?
        wang_li 9y ago
        If it's not possible then it's a rather breathtaking claim of authority that a non EU based business cannot exclude EU citizens.
        deleted 9y ago
        [deleted]
      - chopin 9y ago
        For something you ship that wouldn't fly.
      - PeterisP 9y ago
        The general direction is correct, but not the specific implementation - since it applies to everyone in the EU, no matter what their citizenship, you can just reject all transactions where the shipping address (or credit card address for virtual goods) is in the EU; and that should probably be fine. On the other hand, if you actually want to sell stuff to EU and get a nontrivial number of deals, then no amount of weird checkboxes is going to convince the regulator that it's okay, they aren't stupid.

by debt 9y ago

tlrobinson 9y ago

So what's the definition of "customer from the EU"?

jacquesm 9y ago
In the typical web/e-commerce context someone whose IP address geolocates to an EU based end point or someone who lists their delivery address as inside the union.
- TomMarius 9y ago
  The problem is that the law applies to them even if they use a proxy. If they report/sue you afterwards, you might be looking at a huge amount of trouble.
  - jacquesm 9y ago
    Yes, but like with all this stuff: Your intent to comply with the law carries a lot more weight than actual compliance in edge cases.
    - prewett 9y ago
      That's not very comforting when your goal is avoid having unforeseen problems like being arrested on your European vacation due to violating a law that doesn't apply to your country but you still violated because it applies to all EU citizens regardless of their geographical location.
      - jacquesm 9y ago
        This has never happened as far as I can detect. The only country that does this sort of thing is the US.
      - s73v3r_ 9y ago
        If you're that worried, then stop scooping up every bit of data you find. Start asking if you actually need it.
      - TheCoelacanth 9y ago
        > it applies to all EU citizens regardless of their geographical location It does not. Article 3[1] clearly limits it to people in the EU. It says nothing about applying to EU citizens. [1] https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/
  - wang_li 9y ago
    People will just add a checkbox that the customer must check to complete the transaction: [] I affirm that I an not an EU citizen.
    - TomMarius 9y ago
      That's not possible according to GDPR. Edit: downvotes? Really? Did you guys read the law at all?
      - wang_li 9y ago
        If it's not possible then it's a rather breathtaking claim of authority that a non EU based business cannot exclude EU citizens.
        deleted 9y ago
        [deleted]
    - chopin 9y ago
      For something you ship that wouldn't fly.
    - PeterisP 9y ago
      The general direction is correct, but not the specific implementation - since it applies to everyone in the EU, no matter what their citizenship, you can just reject all transactions where the shipping address (or credit card address for virtual goods) is in the EU; and that should probably be fine. On the other hand, if you actually want to sell stuff to EU and get a nontrivial number of deals, then no amount of weird checkboxes is going to convince the regulator that it's okay, they aren't stupid.