3 ms·
No company outside the EU will face fines and there's nothing the EU can do about it. Also the law is based on physical location (either companies or people in
by manigandham 7y ago
No company outside the EU will face fines and there's nothing the EU can do about it.
Also the law is based on physical location (either companies or people in the EU at the time), not your nationality or citizenship which would be unknown without access to the very data the law is trying to protect.
- bad_user 7y agoHow this works is via trade deals. If you're a foreign company selling to EU citizens you can be subjected to EU fines because there's usually a trade deal that says so. But yes, checking the nationality of all your customers isn't feasible, but I bet the waters get murky when requests, such as data access or deletion requests, come after the fact, with proof of EU citizenship.
- manigandham 7y agoYou may have to prove residence too in the requests, and that can include notarized documents (all acceptable under GDPR rules). As for trade deals, the Safe Harbor agreement that would have allowed this was repealed before (and partly because of) GDPR. The only deal in place now is Privacy Shield which is completely voluntary and has no cross-border enforcement.
- squiggleblaz 7y agoI recently moved to the EU, since the GDPR came into existence. Is Spotify and Google only subject to the GDPR for my data they collected since I moved here?
- manigandham 7y agoTechnically the law only applies to data after you are physically in the EU, not before it, although most companies will store a user's data together so it's likely that once you change your address that it will be treated differently. Most companies have also applied GDPR data access rules globally instead of maintaining separate databases.