2 ms·
My understanding my be wildly incorrect, but I have the impression that the GDPR is something that applies to EU citizens regardless of where they are. A German
by wang_li 7y ago
My understanding my be wildly incorrect, but I have the impression that the GDPR is something that applies to EU citizens regardless of where they are. A German tourist who visits Tennessee who uses his cellphone, with a local sim card, to log into a website hosted in the US to buy tickets to view the world's largest ball of twine can, under GDPR, require that said website remove all information about his visit beyond what is required by law. That seems to be quite reaching.
- big_chungus 7y agoThis is the controversy. If I am the American site, my response to said German tourist is, "No, I operate under the laws of America and therefore am bound by no European decision." I.e. Europe has no jurisdiction over data stored outside her borders, and the citizen transmitted said data. It is indeed a reach, and unenforceable by Europe unless she personally sanctions company share-holders and agents from entry.
- laaph 7y agoThis is quite incorrect. However, a US citizen residing in EU will be covered by GDPR. But EU citizens residing in non-EU countries are not.