3 ms·

This project is completely out of scope for GDPR, not having any presence whatsoever in the EU. You aren't going to be arrested when going on holiday. You would

This project is completely out of scope for GDPR, not having any presence whatsoever in the EU. You aren't going to be arrested when going on holiday. You wouldn't be breaking the law at all, even if it was possible to enforce anything. Even if it was in the EU, it wouldn't require a DPO, and your use of IP addresses is very reasonable and within the standard allowances which don't require user consent. Maybe bother reading _anything_ from an official source before coming to this conclusion? This reads to me more as something you want to have a rant about because you don't like it - rather than as any kind of pragmatic decision.

kasey_junk 8y ago
Disclaimer: I work on GDPR stuff for a company it certainly applies to, this is my opinion not my companies We’ve spent tons of money & interacted with lots of official sources trying to get opinions about what GDPR means and it just isn’t available. Everything is a risk mitigation technique right now with no real answers in sight. If I had any personal projects serving traffic in the EU right now that weren’t profitable I’d likely shut them down. I think it’s likely that the regulatory agencies will act with restraint and this will all be hysteria without merit, but I’ve seen enough legal opinions to know that’s not the worst case scenario.
- ascorbic 8y ago
  What are you talking about? There's a ton of information about what GDPR means, both from the EU and the national regulators (particularly the ICO). The best sign that the regulators aren't going to go crazy with this, is that they already have quite significant powers and they're not throwing their weight around now.
  - kasey_junk 8y ago
    https://www.google.com/amp/s/www.xda-developers.com/facebook-privacy-lawsuit-belgium/amp/ https://www.google.com/amp/s/www.xda-developers.com/facebook... Mind you Belgium us 1/30 the size of the US
    - Sacho 8y ago
      This lawsuit doesn't seem to stem from the GDPR, despite the article (mistakenly[1]) mentioning it. I don't even know if the regulatory bodies are enforcing the GDPR yet, much less in February this year, or even worse, 2015. Here's a statement from the CPP, connected to the 2015 lawsuit. They mention Facebook being in breach of Belgian privacy laws from 1992. https://www.privacycommission.be/sites/privacycommission/files/documents/recommendation_04_2015_0.pdf https://www.privacycommission.be/sites/privacycommission/fil... [1] - none of the other reporting I found on the subject(Guardian, Bloomberg, etc) mentions the GDPR. They also don't show the court order, which is frustrating.
      - kasey_junk 8y ago
        It doesn’t relate to GDPR specifically other than it’s the same regulatory body. That lawsuit is being interpreted as a signal that they intend to be very aggressive in their enforcement of GDPR.
tobltobs 8y ago
If he offers his app to users in the EU and is not conform to the GDPR he is breaking his contract with the app store.

kasey_junk 8y ago

Disclaimer: I work on GDPR stuff for a company it certainly applies to, this is my opinion not my companies We’ve spent tons of money & interacted with lots of official sources trying to get opinions about what GDPR means and it just isn’t available. Everything is a risk mitigation technique right now with no real answers in sight. If I had any personal projects serving traffic in the EU right now that weren’t profitable I’d likely shut them down. I think it’s likely that the regulatory agencies will act with restraint and this will all be hysteria without merit, but I’ve seen enough legal opinions to know that’s not the worst case scenario.

ascorbic 8y ago
What are you talking about? There's a ton of information about what GDPR means, both from the EU and the national regulators (particularly the ICO). The best sign that the regulators aren't going to go crazy with this, is that they already have quite significant powers and they're not throwing their weight around now.
- kasey_junk 8y ago
  https://www.google.com/amp/s/www.xda-developers.com/facebook-privacy-lawsuit-belgium/amp/ https://www.google.com/amp/s/www.xda-developers.com/facebook... Mind you Belgium us 1/30 the size of the US
  - Sacho 8y ago
    This lawsuit doesn't seem to stem from the GDPR, despite the article (mistakenly[1]) mentioning it. I don't even know if the regulatory bodies are enforcing the GDPR yet, much less in February this year, or even worse, 2015. Here's a statement from the CPP, connected to the 2015 lawsuit. They mention Facebook being in breach of Belgian privacy laws from 1992. https://www.privacycommission.be/sites/privacycommission/files/documents/recommendation_04_2015_0.pdf https://www.privacycommission.be/sites/privacycommission/fil... [1] - none of the other reporting I found on the subject(Guardian, Bloomberg, etc) mentions the GDPR. They also don't show the court order, which is frustrating.
    - kasey_junk 8y ago
      It doesn’t relate to GDPR specifically other than it’s the same regulatory body. That lawsuit is being interpreted as a signal that they intend to be very aggressive in their enforcement of GDPR.

tobltobs 8y ago

If he offers his app to users in the EU and is not conform to the GDPR he is breaking his contract with the app store.