4 ms·

Edit: Upon reflection, I don't think that this satisfies GDPR. They would need to entirely deny access to users in the EU. Just telling them that US law applies

Edit: Upon reflection, I don't think that this satisfies GDPR. They would need to entirely deny access to users in the EU. Just telling them that US law applies, and that they can access the site only if they agree to give up their rights, doesn't suffice. But I guess that we'll see. I'm sure that complaints have been lodged.

shkkmo 7y ago
I think the key part is this assertion: "The Website is hosted in the United States and is intended for and directed to users in the United States." As long as there aren't other indications that the business is actually doing business in the EU (e.g. has German or French localization, sells stuff to EU based customers, etc), this helps demonstrate that they don't need to comply with the GDPR. While there are many companies that have chosen to try and block users in the EU, I don't think this is required, or intended by GDPR.
- mirimir 7y ago
  Maybe so. I guess that we'll see.