4 ms·

Any company that stores or processes identifiable info like photos, names or even ip address on EU citizens is within the scope of GDPR. If I withdraw my conse

by s_dev 8y ago

Any company that stores or processes identifiable info like photos, names or even ip address on EU citizens is within the scope of GDPR. If I withdraw my consent for example from Venmo to hold my name. Is that public record altered?

freeone3000 8y ago
This does not service EU citizens.
- AndreasHae 8y ago
  What about EU citizens living in the United States? They also fall under the scope of GDPR AFAIK.
  - Phlarp 8y ago
    Then they are under US law. Just as a US citizen would be under a different legal regime in a foreign country.
  - briandear 8y ago
    They do not. Just like HIPAA doesn’t apply to Americans in Europe.
briandear 8y ago
You might be confusing EU citizens with EU residents. An EU citizen in the US, dealing with a US health provider is covered by HIPAA, while an American citizen dealing with an EU health provider is not covered by HIPAA. EU consumer protection laws don’t apply to items purchased in the US, nor do US laws apply on EU purchases. There seems to be confusion over “jurisdiction.” An EU citizen resident in the US is subject to both EU and US tax law, but a US employer who hires a US resident who happens to be an EU citizen is not subject to EU tax law because that US company, in this context, is not within the jurisdiction of the EU, while an EU citizen still retains obligations to the EU by virtue of citizenship. (And vice versa for Americans.) Venmo isn’t doing any EU business even if EU citizens are using the system within the US. The citizenship of the customer is irrelevant.
- s_dev 8y ago
  Check the official documentation -- the wording doesn't say residents or citizens. It says "Individuals in the EU". I guess we interpret this differently: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/application-regulation/who-does-data-protection-law-apply_en https://ec.europa.eu/info/law/law-topic/data-protection/refo... Venmo is owned by PayPal who have an existing entity and operation in the EU -- they are absolutely covered by GDPR and they can't get out of it by having a subsidary based exclusively in the US.

by s_dev 8y ago

freeone3000 8y ago

This does not service EU citizens.

AndreasHae 8y ago
What about EU citizens living in the United States? They also fall under the scope of GDPR AFAIK.
- Phlarp 8y ago
  Then they are under US law. Just as a US citizen would be under a different legal regime in a foreign country.
- briandear 8y ago
  They do not. Just like HIPAA doesn’t apply to Americans in Europe.

briandear 8y ago

You might be confusing EU citizens with EU residents. An EU citizen in the US, dealing with a US health provider is covered by HIPAA, while an American citizen dealing with an EU health provider is not covered by HIPAA. EU consumer protection laws don’t apply to items purchased in the US, nor do US laws apply on EU purchases. There seems to be confusion over “jurisdiction.” An EU citizen resident in the US is subject to both EU and US tax law, but a US employer who hires a US resident who happens to be an EU citizen is not subject to EU tax law because that US company, in this context, is not within the jurisdiction of the EU, while an EU citizen still retains obligations to the EU by virtue of citizenship. (And vice versa for Americans.) Venmo isn’t doing any EU business even if EU citizens are using the system within the US. The citizenship of the customer is irrelevant.

s_dev 8y ago
Check the official documentation -- the wording doesn't say residents or citizens. It says "Individuals in the EU". I guess we interpret this differently: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/application-regulation/who-does-data-protection-law-apply_en https://ec.europa.eu/info/law/law-topic/data-protection/refo... Venmo is owned by PayPal who have an existing entity and operation in the EU -- they are absolutely covered by GDPR and they can't get out of it by having a subsidary based exclusively in the US.