3 ms·
This is irrelevant as long as they have customers whose rights are protected by GDPR.
by gnulinux 8y ago
This is irrelevant as long as they have customers whose rights are protected by GDPR.
- buboard 8y agoi am mistaken. But the idea is , if they were not based in europe , which country's DPA is going to go after them? Where will the money be paid?
- jlawer 8y agoBut they have european entities (AWS, fulfilment centres, etc). If they don't choose to put themselves somewhere, everyone may go after them separately.
- buboard 8y ago... and then they can negotiate with the country that gives them the smallest punishment. (under gdpr only one will go after them at a time).
- wavefunction 8y agoNegotiating with every country in the EU serially is not that much better than in parallel.
- cyphar 8y agoLikely Luxembourg, where they are headquartered. Unfortunately (as we found in the DieselGate scandal -- where car companies directly caused thousands of deaths), Luxembourg doesn't have very strong regulatory teeth. Here's hoping they're more strict.
- pluma 8y agoNot really? Any EU customer could report them to their own DPA who would have to investigate the issue and resolve it. There's no reason any DPA in Luxembourg would have to be involved the way I understand it (except for customers in Luxembourg of course).