4 ms·

If you don't do any business in the EU I'm not sure how the new law would apply.

• p1necone 9y ago
  So we should have a whitelist of countries we decide we are "doing business" in and block all other traffic globally?
  • icebraining 9y ago
    You don't need to block traffic, just don't specifically target those countries[1]. And don't track people connecting from them. [1] https://gdpr-info.eu/recitals/no-23/ https://gdpr-info.eu/recitals/no-23/
    • aeorgnoieang 9y ago
      That "recital" is still pretty vague; the relevant text: > Whereas the mere accessibility of the controller’s, processor’s or an intermediary’s website in the Union, of an email address or of other contact details, or the use of a language generally used in the third country where the controller is established, is insufficient to ascertain such intention, factors such as the use of a language or a currency generally used in one or more Member States with the possibility of ordering goods and services in that other language, or the mentioning of customers or users who are in the Union, may make it apparent that the controller envisages offering goods or services to data subjects in the Union. Note that "the use of a language or a currency generally used in one or more Member States ... may make it apparent that the controller envisages offering goods or services to data subjects in the Union". So simply using a language in use in a EU member country may be sufficient that you "envisage" offering your goods or services. That seems significantly different than your claim that one need merely not "specifically target those countries".
      • icebraining 9y ago
        Yes, but these things are assessed by judged, not by dice-throwing. I'm sure we can devise contrived examples that fall into gray area, but for the most part I think what I wrote is correct.