4 ms·

You mean like all of the US news sites that just firewall off EU citizens at the moment?

BrandoElFollito 7y ago
I do not understand why they do that. If a US news outlet has no presence in the EU there is nothing which can be done if they do not follow EU rules.
- moomin 7y ago
  It’s just a passive-aggressive hissy fit. The cost of writing the middleware to write out your angsty nonsense is higher than the cost of writing the middleware to just remove all cookies from every request. The EU detection logic is the same in both cases.
  - erik_seaberg 7y ago
    GDPR has a lot of burdensome requirements, like hiring a commissar and multi-month government review periods before features launches. Do not bet 21M USD that merely deleting cookies and logs will get you anywhere near compliance.
    - moomin 7y ago
      I'm not sure how serving up a custom page to EU addresses solves that problem either, though, so we come back to equivalence.
      - erik_seaberg 7y ago
        The theory is that Article 3 stops the EU from coming after you (however they might try) if you don't offer goods or services to EU data subjects or monitor their behavior. The GDPR is roughly the size of a novel, and proving you're doing everything it requires is a hell of a lot more work than proving you're out of scope entirely.
    - elygre 7y ago
      > multi-month government review Can you explain this a bit more?
      - erik_seaberg 7y ago
        It's still extremely vague how many releases will require the eight-week review with six-week extension in https://gdpr-info.eu/art-36-gdpr/ https://gdpr-info.eu/art-36-gdpr/, but this is the kind of friction and cost they're imposing even on groups who aren't doing anything bad.
bsder 7y ago
Then start an EU competitor that doesn't--most US news sites are simply repackaging content anyway. You should clean up, no?
- esotericn 7y ago
  Did you read the post above mine? > How are these different from GDPR? Most global companies should already have most of this in place There are tons of companies, global or not, that don't have it in place. They won't be able to deal with it by firewalling off their home market.
  - bsder 7y ago
    And my point is that I don't see EU competitors jumping into the gap left by companies that simply firewall off the EU. Now, it could simply be that everybody is waiting to see if the GDPR enforcement is going to become aggressive before doing so. There is no point in trying to compete with an entrenched US company until the EU actually neuters them.

I do not understand why they do that. If a US news outlet has no presence in the EU there is nothing which can be done if they do not follow EU rules.

moomin 7y ago
It’s just a passive-aggressive hissy fit. The cost of writing the middleware to write out your angsty nonsense is higher than the cost of writing the middleware to just remove all cookies from every request. The EU detection logic is the same in both cases.
- erik_seaberg 7y ago
  GDPR has a lot of burdensome requirements, like hiring a commissar and multi-month government review periods before features launches. Do not bet 21M USD that merely deleting cookies and logs will get you anywhere near compliance.
  - moomin 7y ago
    I'm not sure how serving up a custom page to EU addresses solves that problem either, though, so we come back to equivalence.
    - erik_seaberg 7y ago
      The theory is that Article 3 stops the EU from coming after you (however they might try) if you don't offer goods or services to EU data subjects or monitor their behavior. The GDPR is roughly the size of a novel, and proving you're doing everything it requires is a hell of a lot more work than proving you're out of scope entirely.
  - elygre 7y ago
    > multi-month government review Can you explain this a bit more?
    - erik_seaberg 7y ago
      It's still extremely vague how many releases will require the eight-week review with six-week extension in https://gdpr-info.eu/art-36-gdpr/ https://gdpr-info.eu/art-36-gdpr/, but this is the kind of friction and cost they're imposing even on groups who aren't doing anything bad.

bsder 7y ago

Then start an EU competitor that doesn't--most US news sites are simply repackaging content anyway. You should clean up, no?

esotericn 7y ago
Did you read the post above mine? > How are these different from GDPR? Most global companies should already have most of this in place There are tons of companies, global or not, that don't have it in place. They won't be able to deal with it by firewalling off their home market.
- bsder 7y ago
  And my point is that I don't see EU competitors jumping into the gap left by companies that simply firewall off the EU. Now, it could simply be that everybody is waiting to see if the GDPR enforcement is going to become aggressive before doing so. There is no point in trying to compete with an entrenched US company until the EU actually neuters them.