4 ms·
GDPR applies for non-EU based operations as long as the users are EU-based. I guess theoretically they only have to comply with GDPR specifically for EU-based
by kungtotte 8y ago
GDPR applies for non-EU based operations as long as the users are EU-based.
I guess theoretically they only have to comply with GDPR specifically for EU-based operations and/or EU citizens, so they could technically keep at it if their servers are outside the EU and for any non-EU users. But I think in the long run it'll be easier to have sitewide compliance.
- dahdum 8y agoSitewide compliance could reduce revenue worldwide, in those cases it could often make sense to exit the EU market entirely.
- kungtotte 8y agoThat is of course one alternative. Depending on your business it might be viable, but the EU is a pretty big market to skip out on assuming your business model itself doesn't violate the GDPR.
- s73v3r_ 8y agoIf the only reason you're making money is by disrespecting your user's privacy, then one has to question whether you should be in business in the first place.
- dahdum 8y agoGDPR isn’t perfect, and those not in compliance with a new, vaguely written, policy aren’t automatically evil.