4 ms·

What do you recommend the small businesses in the US do that have no business presences in the EU, but have EU visitors to their sites? It's not hysteria if it

What do you recommend the small businesses in the US do that have no business presences in the EU, but have EU visitors to their sites? It's not hysteria if it's a legitimate legal threat that could destroy your ability to feed your family.

mstolpm 8y ago
Tell your users what PII you collect about them and why, ask for consent and give an option to opt-out. There is not "legal threat" if you are open about your business model, keep the collected PII reasonable and safe and don't sell the data without consent. Honoring requests for information or deletion is still a problem for you if you served EU users in the past if you don't delete/anonymize that data - even if you block access. If you're not open about your data processing and handling and don't ask for consent, don't blame the GDPR for a business model that can't be honest to your users.
- RobertRoberts 8y ago
  You are confirming that all it takes is a little slip up, and your entire life is ruined by legal fees. Or even just the "whiff" of potential slip up, not even a real one, but only a perceived slip up, and your life is over. I have been in court before, if you have not, perhaps that is why you are ignorant of the horrendous dangers this law puts on everyone.
  - DanBC 8y ago
    No. After one small slip up nothing would happen, unless someone notices it and reports it to the regulator. At that point they'd write you a letter and explain where they think you're going wrong, and point to best practice, and ask you to confirm what you're actually doing.
    - RobertRoberts 8y ago
      You mean like they did with Google and Facebook, on the FIRST day the law went into effect? http://money.cnn.com/2018/05/25/technology/gdpr-compliance-facebook-google/index.html http://money.cnn.com/2018/05/25/technology/gdpr-compliance-f...
sshine 8y ago
If you have no presence in the EU, why should you care about the GDPR? My website contains jokes that will get me imprisoned in some countries, but I don't block access to those countries since their legislation does not apply.
- RobertRoberts 8y ago
  Because those countries have not announced to the world that will sue you in court if one of their citizens reads your jokes. The GDPR has done this. I "believe" this law was intended to be a big hammer on the data brokers of the world, but the little fish often get the focus after the big fish are all caught. Even if they aren't the original target. If you haven't looked up the law, you should do so. It states emphatically and clearly, you having a business presence in the EU is irrelevant to this law.
  - candiodari 8y ago
    This is, of course, untested and a huge grab of authority. Just imagine what would happen if China did this. Or if Saudi Arabia did it. "Any woman driving anywhere in the world can be stoned to death", I'm sure there's quite a few islamic clerics dreaming of the day it happens. The thing to see is that this law, enforced internationally, has about the same level of realism that those clerics have.
DanBC 8y ago
It's not a legitimate legal threat. Why aren't you worried about all the other laws across the world that probably apply to you?
- RobertRoberts 8y ago
  First off, I've never heard of one that claims if I interact with their citizen that I am liable under their law. And more importantly, this is a total fiasco. I have dozens of emails from all kinds of providers telling me about updates to their privacy policies or otherwise. And there's been talk and warning for month from Wordpress plugin devs and blogs. Can you name a single other foreign law in the past 20 years that has had this effect on US businesses?

mstolpm 8y ago

Tell your users what PII you collect about them and why, ask for consent and give an option to opt-out. There is not "legal threat" if you are open about your business model, keep the collected PII reasonable and safe and don't sell the data without consent. Honoring requests for information or deletion is still a problem for you if you served EU users in the past if you don't delete/anonymize that data - even if you block access. If you're not open about your data processing and handling and don't ask for consent, don't blame the GDPR for a business model that can't be honest to your users.

RobertRoberts 8y ago
You are confirming that all it takes is a little slip up, and your entire life is ruined by legal fees. Or even just the "whiff" of potential slip up, not even a real one, but only a perceived slip up, and your life is over. I have been in court before, if you have not, perhaps that is why you are ignorant of the horrendous dangers this law puts on everyone.
- DanBC 8y ago
  No. After one small slip up nothing would happen, unless someone notices it and reports it to the regulator. At that point they'd write you a letter and explain where they think you're going wrong, and point to best practice, and ask you to confirm what you're actually doing.
  - RobertRoberts 8y ago
    You mean like they did with Google and Facebook, on the FIRST day the law went into effect? http://money.cnn.com/2018/05/25/technology/gdpr-compliance-facebook-google/index.html http://money.cnn.com/2018/05/25/technology/gdpr-compliance-f...

sshine 8y ago

If you have no presence in the EU, why should you care about the GDPR? My website contains jokes that will get me imprisoned in some countries, but I don't block access to those countries since their legislation does not apply.

RobertRoberts 8y ago
Because those countries have not announced to the world that will sue you in court if one of their citizens reads your jokes. The GDPR has done this. I "believe" this law was intended to be a big hammer on the data brokers of the world, but the little fish often get the focus after the big fish are all caught. Even if they aren't the original target. If you haven't looked up the law, you should do so. It states emphatically and clearly, you having a business presence in the EU is irrelevant to this law.
- candiodari 8y ago
  This is, of course, untested and a huge grab of authority. Just imagine what would happen if China did this. Or if Saudi Arabia did it. "Any woman driving anywhere in the world can be stoned to death", I'm sure there's quite a few islamic clerics dreaming of the day it happens. The thing to see is that this law, enforced internationally, has about the same level of realism that those clerics have.

DanBC 8y ago

It's not a legitimate legal threat. Why aren't you worried about all the other laws across the world that probably apply to you?

RobertRoberts 8y ago
First off, I've never heard of one that claims if I interact with their citizen that I am liable under their law. And more importantly, this is a total fiasco. I have dozens of emails from all kinds of providers telling me about updates to their privacy policies or otherwise. And there's been talk and warning for month from Wordpress plugin devs and blogs. Can you name a single other foreign law in the past 20 years that has had this effect on US businesses?