3 ms·
What is the mechanics by which GDPR is enforced against companies that are US based? Like, you live in the US, your website is blatantly non-GDPR-compliant, yo
by csense 8y ago
What is the mechanics by which GDPR is enforced against companies that are US based? Like, you live in the US, your website is blatantly non-GDPR-compliant, you get a court summons from Europe, and ignore it, and then a bill for a fine, and you ignore that too, what happens?
Do they force European ISP's to blackhole traffic to your website's DNS / IP if you don't comply? If you're hosted on AWS, do the European authorities make Amazon an offer they can't refuse: Either Amazon takes down your GDPR-violating site, or every Amazon package everywhere in Europe becomes illegal? Can they force your bank to disgorge the fine directly from your bank account without your consent (e.g. by threatening to cut the bank off from any ability to legally transact with anyone anywhere in Europe)? Can they get an extradition warrant and have US police arrest you and send you to stand trial in Europe? If your company's CEO travels to Europe on vacation, does he risk having European police waiting to handcuff him as soon as he steps off the plane?
- clubm8 8y agoI think you need to have a European office. The issue is that many do - if not to have a legit satellite office, then because they moved their "official" HQs to Ireland to participate in tax shenanigans.
- groestl 8y agoNothing of that sorts, but: The GDPR applies only to non-EU organizations when they specifically target people in the EU, e.g. local currency payment, shipment to the EU, local support hotline. This usually requires contracting services from EU companies. And while the violating company can ignore the legislation, their service providers might be fully liable for any damage in the chain, caused by gross negligence.