3 ms·

GDPR requires protection for all EU citizens regardless of location of the user or the data. This means that the millions of EU citizens living in the US have

GDPR requires protection for all EU citizens regardless of location of the user or the data. This means that the millions of EU citizens living in the US have to be afforded the same protection, or FB faces very punitive fines. It will be interesting to see how this plays out. Will FB require users to stipulate that they do not have an EU passport? What happens if we all say we have one? How would they verify that?

deleted 9y ago
[deleted]
shadowtree 9y ago
No, it applies to EU residents. A US citizen living in Hamburg is covered by GDPR. An Austrian citizen living in the SF Bay Area is not covered by GDPR. Don't know if this makes it easier or harder.
- some_random 9y ago
  Absolutely harder, since a US citizen living in Hamburg can vpn into the US and (presumably) still be covered by GDPR. So, I honestly don't know how Facebook could possibly make this distinction in an efficient manner. So, as an American, I'm pretty happy.
- jmalicki 9y ago
  What if I am an Austrian citizen and resident traveling to the SF Bay Area? Does it still apply? (Not clear on how jurisdiction works in these sorts of cases)
  - shadowtree 9y ago
    I predict sign-up dialogs where you will have to unequivocally state if you're a EU resident or not - because there is next to no algorithmic way of making sure you're dealing with a EU resident.
tzs 9y ago
> GDPR requires protection for all EU citizens regardless of location of the user or the data. I haven't yet read the whole of GDPR, so maybe there is something further in that changes this, but based on Article 3 that does not to be the case. Here's an earlier comment of mine that quotes Article 3 and discusses this [1]. Here's a link to a nicely formatted online copy of GDPR [2]. It appears to require protection when either (1) the entity processing the data is in the EU or (2) the person whose data is being processed is in the EU. [1] https://news.ycombinator.com/item?id=16752857 https://news.ycombinator.com/item?id=16752857 [2] https://gdpr-info.eu/ https://gdpr-info.eu/

deleted 9y ago

[deleted]

shadowtree 9y ago

No, it applies to EU residents. A US citizen living in Hamburg is covered by GDPR. An Austrian citizen living in the SF Bay Area is not covered by GDPR. Don't know if this makes it easier or harder.

some_random 9y ago
Absolutely harder, since a US citizen living in Hamburg can vpn into the US and (presumably) still be covered by GDPR. So, I honestly don't know how Facebook could possibly make this distinction in an efficient manner. So, as an American, I'm pretty happy.
jmalicki 9y ago
What if I am an Austrian citizen and resident traveling to the SF Bay Area? Does it still apply? (Not clear on how jurisdiction works in these sorts of cases)
- shadowtree 9y ago
  I predict sign-up dialogs where you will have to unequivocally state if you're a EU resident or not - because there is next to no algorithmic way of making sure you're dealing with a EU resident.

tzs 9y ago

> GDPR requires protection for all EU citizens regardless of location of the user or the data. I haven't yet read the whole of GDPR, so maybe there is something further in that changes this, but based on Article 3 that does not to be the case. Here's an earlier comment of mine that quotes Article 3 and discusses this [1]. Here's a link to a nicely formatted online copy of GDPR [2]. It appears to require protection when either (1) the entity processing the data is in the EU or (2) the person whose data is being processed is in the EU. [1] https://news.ycombinator.com/item?id=16752857 https://news.ycombinator.com/item?id=16752857 [2] https://gdpr-info.eu/ https://gdpr-info.eu/