4 ms·

There is no GDPR compliance requirement for personal, non-commercial, side-projects. You can gather PPI on all the people in the world and use it on your own fo

by ovi256 8y ago

There is no GDPR compliance requirement for personal, non-commercial, side-projects. You can gather PPI on all the people in the world and use it on your own for non-commercial purposes and GDPR has nothing to say about that.

WA 8y ago
I think this is completely false. Do you have a source for that?
- ovi256 8y ago
  https://gdpr-info.eu/recitals/no-18/ https://gdpr-info.eu/recitals/no-18/
  - deleted 8y ago
    [deleted]
  - pbhjpbhj 8y ago
    That doesn't say what you claimed at all, not by the longest stretch of the imagination.
  - fierarul 8y ago
    I think a side-project would classify as 'in connection with a professional activity'. This recital basically covers your personal rolodex.
pc86 8y ago
But if you're creating a personal side-project for commercial ends you still need GDPR compliance, right?
- ska 8y ago
  Yes, and "commercial" is a pretty low bar here.
groestl 8y ago
In general, this is true, but only if the side-project is absolutely for own, private reasons. As soon as there any economic activity, the GDPR applies, which is a very low bar that even some personal side-projects cross.
- jimmaswell 8y ago
  I'm so glad that if I had a revenue generating side project, I wouldn't have to worry about that horrible twisted maze of burdensome nonsense as long as I blocked EU countries. It's nice living in the US and having some modicum of autonomy left as someone on the developer side of things.
  - groestl 8y ago
    As a private developer, I agree, yet as a consumer and professional developer, I'm glad things move in this direction. And I assume the GDPR will provide a model for US regulation (just as the DMCA has influenced the European market as well). BTW: You don't have to block them completely, just don't target them specifically (e.g. accept their credit cards).
    - jimmaswell 8y ago
      As a consumer and professional developer, I feel no desire to wield a power to unfairly bully web services with unreasonable demands about their data pertaining to me.
- deleted 8y ago
  [deleted]

by ovi256 8y ago

WA 8y ago

I think this is completely false. Do you have a source for that?

ovi256 8y ago
https://gdpr-info.eu/recitals/no-18/ https://gdpr-info.eu/recitals/no-18/
- deleted 8y ago
  [deleted]
- pbhjpbhj 8y ago
  That doesn't say what you claimed at all, not by the longest stretch of the imagination.
- fierarul 8y ago
  I think a side-project would classify as 'in connection with a professional activity'. This recital basically covers your personal rolodex.

pc86 8y ago

But if you're creating a personal side-project for commercial ends you still need GDPR compliance, right?

ska 8y ago
Yes, and "commercial" is a pretty low bar here.

groestl 8y ago

In general, this is true, but only if the side-project is absolutely for own, private reasons. As soon as there any economic activity, the GDPR applies, which is a very low bar that even some personal side-projects cross.

jimmaswell 8y ago
I'm so glad that if I had a revenue generating side project, I wouldn't have to worry about that horrible twisted maze of burdensome nonsense as long as I blocked EU countries. It's nice living in the US and having some modicum of autonomy left as someone on the developer side of things.
- groestl 8y ago
  As a private developer, I agree, yet as a consumer and professional developer, I'm glad things move in this direction. And I assume the GDPR will provide a model for US regulation (just as the DMCA has influenced the European market as well). BTW: You don't have to block them completely, just don't target them specifically (e.g. accept their credit cards).
  - jimmaswell 8y ago
    As a consumer and professional developer, I feel no desire to wield a power to unfairly bully web services with unreasonable demands about their data pertaining to me.
deleted 8y ago
[deleted]