4 ms·

I have no budget to be able to comply with GDPR, my web apps are barely break-even as it is. I don't even cater to EU citizens, and even though I don't do anyth

I have no budget to be able to comply with GDPR, my web apps are barely break-even as it is. I don't even cater to EU citizens, and even though I don't do anything shady with personal information, I'm still at risk of running afoul of some regulator in some far off country. So my choice is to keep running this risk or just block all European IP addresses. IMO that's not really "state of the art," and the more countries / provinces / municipalities that pass their own convoluted regulations the more risk it puts me under as a small business owner. The net result is only huge companies have any hope of being able to afford the compliance costs with all of this bullshit.

freehunter 7y ago
Eh... if you don't do business in Europe and don't target EU citizens, you don't need to worry about GDPR. It only applies if you sell to EU citizens or ship products to Europe or in some way advertise that your company does business in Europe. [1] The regulation is definitely state-of-the-art in terms of end user privacy, even if some companies don't have a state-of-the-art response to the challenges it poses. [1] https://gdpr.eu/companies-outside-of-europe/ https://gdpr.eu/companies-outside-of-europe/
- deleted 7y ago
  [deleted]
- rubbingalcohol 7y ago
  I run commercial web apps. Literally anyone in the world with a credit card could sign up. I guess I need to put serious thought into straight up blocking Europe since I don't have budget for regulatory compliance.
- tzs 7y ago
  One subtlety. The regulation uses the term "in the Union" rather than "EU citizens" to describe the data subjects it covers.
blub 7y ago
You're operating under the incorrect assumption that the EU owes some individuals or companies in some far of country an existence, even at the cost of the privacy of EU citizens. It doesn't. Obey the law or stop serving the European market, it's that simple.

freehunter 7y ago

Eh... if you don't do business in Europe and don't target EU citizens, you don't need to worry about GDPR. It only applies if you sell to EU citizens or ship products to Europe or in some way advertise that your company does business in Europe. [1] The regulation is definitely state-of-the-art in terms of end user privacy, even if some companies don't have a state-of-the-art response to the challenges it poses. [1] https://gdpr.eu/companies-outside-of-europe/ https://gdpr.eu/companies-outside-of-europe/

deleted 7y ago
[deleted]
rubbingalcohol 7y ago
I run commercial web apps. Literally anyone in the world with a credit card could sign up. I guess I need to put serious thought into straight up blocking Europe since I don't have budget for regulatory compliance.
tzs 7y ago
One subtlety. The regulation uses the term "in the Union" rather than "EU citizens" to describe the data subjects it covers.

blub 7y ago

You're operating under the incorrect assumption that the EU owes some individuals or companies in some far of country an existence, even at the cost of the privacy of EU citizens. It doesn't. Obey the law or stop serving the European market, it's that simple.