5 ms·

So a US company providing services to a US naturalized citizen in the US that is also a dual citizen of a country in the EU makes the company liable to follow

by 77pt77 9y ago

So a US company providing services to a US naturalized citizen in the US that is also a dual citizen of a country in the EU makes the company liable to follow these regulations? That makes no sense. This sounds unenforceable.

danieltillett 9y ago
Yep. It is worse that it can be a EU resident (non-citizen) visiting the the USA using a USA only service and the law as currently written still applies. Good luck. The next fun job is working out how to remove the data from all your backups when you get a removal request. I have taken the approach that I will comply with the general intent of the GDPR (which I did long before it existed), but not try to apply the ridiculous parts.
- s73v3r_ 9y ago
  "Yep. It is worse that it can be a EU resident (non-citizen) visiting the the USA using a USA only service and the law as currently written still applies. Good luck." You're going to have to provide proof to back up that statement.
  - danieltillett 9y ago
    The regulations are ridiculously broad [0]. They appear to cover everyone in the world no matter where they are or what their citizenship. The EU seems to be aiming for a universal human right. "The principles of, and rules on the protection of natural persons with regard to the processing of their personal data should, whatever their nationality or residence, respect their fundamental rights and freedoms, in particular their right to the protection of personal data.” 0. http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX...
    - s73v3r_ 9y ago
      That's the intro statement. That's like saying the Declaration of Independence is overly broad because it says that "all men are created equal."
      - danieltillett 9y ago
        See my posts down thread for the more detailed clauses.
danieltillett 9y ago
It is not citizenship, but residency. Yes the regulations make no sense and they really aren’t enforceable outside of the EU.
- 77pt77 9y ago
  > It is not citizenship, but residency. I think it's both.
  - danieltillett 9y ago
    There is nothing in the regulations that talk about citizenship, just residency.

by 77pt77 9y ago

danieltillett 9y ago

Yep. It is worse that it can be a EU resident (non-citizen) visiting the the USA using a USA only service and the law as currently written still applies. Good luck. The next fun job is working out how to remove the data from all your backups when you get a removal request. I have taken the approach that I will comply with the general intent of the GDPR (which I did long before it existed), but not try to apply the ridiculous parts.

s73v3r_ 9y ago
"Yep. It is worse that it can be a EU resident (non-citizen) visiting the the USA using a USA only service and the law as currently written still applies. Good luck." You're going to have to provide proof to back up that statement.
- danieltillett 9y ago
  The regulations are ridiculously broad [0]. They appear to cover everyone in the world no matter where they are or what their citizenship. The EU seems to be aiming for a universal human right. "The principles of, and rules on the protection of natural persons with regard to the processing of their personal data should, whatever their nationality or residence, respect their fundamental rights and freedoms, in particular their right to the protection of personal data.” 0. http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX...
  - s73v3r_ 9y ago
    That's the intro statement. That's like saying the Declaration of Independence is overly broad because it says that "all men are created equal."
    - danieltillett 9y ago
      See my posts down thread for the more detailed clauses.

danieltillett 9y ago

It is not citizenship, but residency. Yes the regulations make no sense and they really aren’t enforceable outside of the EU.

77pt77 9y ago
> It is not citizenship, but residency. I think it's both.
- danieltillett 9y ago
  There is nothing in the regulations that talk about citizenship, just residency.