4 ms·

Yeah, the burden of not exploiting their users really is a huge undertaking.

by tjoff 7y ago

Hermel 7y ago
It’s certainly much cheaper to simply block European users than to pay a lawyer to tell you what you need to change and then pay a programmer to implement these changes. Blocking the few European users is probably the right decision from an economic perspective.
- nannal 7y ago
  Then I'm going to vote with my European wallet and commit not to visit sites that block me. Let's see just how much they like that.
  - deaps 7y ago
    That'll show 'em
  - pingyong 7y ago
    They literally intentionally blocked you... that's kinda what they expect to happen lol.
    - DarkWiiPlayer 7y ago
      Wooooosh... (That was the sound of the joke going over your head)
unknown_library 7y ago
GDPR adds a lot of regulatory red tape to things that were previously simple. It is not only for nefarious reasons that you might want to avoid GDPR. Want to store logs? Now you need to make sure you're scrubbing any type of personal information from the logs. Want to use a third-party service? Now you need to make sure that you are using their GDPR-compliant plan, and that you are using their Amsterdam endpoints. Maybe you need to renegotiate your contract with them.
- asutekku 7y ago
  I mean you shouldn’t store any personal information in the logs to begin with.
  - marcinzm 7y ago
    Most places would log the IP (for spam prevention, security tracking, etc) which is personal information under GDPR.
    - DarkWiiPlayer 7y ago
      > which is personal information under GDPR Not exactly; it's up to the judges to decide whether IP addresses count as personal information as defined by the GDPR (in my opinion they're not, but I can see why one would think differently), so the flaw isn't as much inherent to the GDPR as to the fact that people just don't understand the internet.
      - vonmoltke 7y ago
        Recital 30 specifically calls out IP addresses: https://gdpr-info.eu/recitals/no-30/ https://gdpr-info.eu/recitals/no-30/ While the wording of the Recital leaves some ambiguity as to whether an IP is automatically Personal Data under the GDPR, its specific call-out would make arguing that it is not difficult. This would particularly be the interpretation of American lawyers, who tend to assume that no connection is too tenuous to be held against their client by a shrewd prosecutor or regulator and will thus advise their client to treat all IPs in all situations as Personal Data.
        tjoff 7y ago
        It depends on the context. An ISP can trivially map an IP to a person. So can Amazon/whoever if they saved the IP alongside other customer information. But a naked ip->person lookup would require a warrant.
    - MattConfluence 7y ago
Balanceinfinity 7y ago
on the lighter side, I do a lot of cooking and I always laugh when I visit a baking website and I get a popup that warns me about the cookie policy. Because of the context, my brain first goes to "I wonder what the recipe is for those cookies."

Yeah, the burden of not exploiting their users really is a huge undertaking.

by tjoff 7y ago

Yeah, the burden of not exploiting their users really is a huge undertaking.

It’s certainly much cheaper to simply block European users than to pay a lawyer to tell you what you need to change and then pay a programmer to implement these changes. Blocking the few European users is probably the right decision from an economic perspective.

nannal 7y ago
Then I'm going to vote with my European wallet and commit not to visit sites that block me. Let's see just how much they like that.
- deaps 7y ago
  That'll show 'em
- pingyong 7y ago
  They literally intentionally blocked you... that's kinda what they expect to happen lol.
  - DarkWiiPlayer 7y ago
    Wooooosh... (That was the sound of the joke going over your head)

unknown_library 7y ago

GDPR adds a lot of regulatory red tape to things that were previously simple. It is not only for nefarious reasons that you might want to avoid GDPR. Want to store logs? Now you need to make sure you're scrubbing any type of personal information from the logs. Want to use a third-party service? Now you need to make sure that you are using their GDPR-compliant plan, and that you are using their Amsterdam endpoints. Maybe you need to renegotiate your contract with them.

asutekku 7y ago
I mean you shouldn’t store any personal information in the logs to begin with.
- marcinzm 7y ago
  Most places would log the IP (for spam prevention, security tracking, etc) which is personal information under GDPR.
  - DarkWiiPlayer 7y ago
    > which is personal information under GDPR Not exactly; it's up to the judges to decide whether IP addresses count as personal information as defined by the GDPR (in my opinion they're not, but I can see why one would think differently), so the flaw isn't as much inherent to the GDPR as to the fact that people just don't understand the internet.
    - vonmoltke 7y ago
      Recital 30 specifically calls out IP addresses: https://gdpr-info.eu/recitals/no-30/ https://gdpr-info.eu/recitals/no-30/ While the wording of the Recital leaves some ambiguity as to whether an IP is automatically Personal Data under the GDPR, its specific call-out would make arguing that it is not difficult. This would particularly be the interpretation of American lawyers, who tend to assume that no connection is too tenuous to be held against their client by a shrewd prosecutor or regulator and will thus advise their client to treat all IPs in all situations as Personal Data.
      - tjoff 7y ago
        It depends on the context. An ISP can trivially map an IP to a person. So can Amazon/whoever if they saved the IP alongside other customer information. But a naked ip->person lookup would require a warrant.
  - MattConfluence 7y ago

Balanceinfinity 7y ago

on the lighter side, I do a lot of cooking and I always laugh when I visit a baking website and I get a popup that warns me about the cookie policy. Because of the context, my brain first goes to "I wonder what the recipe is for those cookies."