4 ms·
> British law also N.Irish people to declare themselves Irish under the GFA This by itself doesn't mean anything for GDPR—GDPR applies to EU residents (whether
by supergarfield 7y ago
> British law also N.Irish people to declare themselves Irish under the GFA
This by itself doesn't mean anything for GDPR—GDPR applies to EU residents (whether or not they are EU citizens), not EU citizens. Declaring yourself Irish doesn't make you fall under GDPR protection if you live outside the EU.
- tehlike 7y agoI am not sure if this entirely true. My understanding was it was both citizens and residents.
- vageli 7y agoThis link [0] seems to suggest otherwise. [0]: https://www.hipaajournal.com/does-gdpr-apply-to-eu-citizens-living-in-the-us/ https://www.hipaajournal.com/does-gdpr-apply-to-eu-citizens-...
- _-___________-_ 7y agoGDPR applies to EU & EEA residents.
- _-___________-_ 7y agoA fairly readable summary of the territorial scope of GDPR: https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_guidelines_3_2018_territorial_scope_en.pdf https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_gui... In fact, it's not even legal residency that matters. You must simply be present in the territory that the regulations apply to (EU+EEA). If you're not, then the protections don't apply to you, regardless of your citizenship.
- icebraining 7y ago> If you're not, then the protections don't apply to you, regardless of your citizenship. Yes, unless the company is itself in the EU, in which case the GDPR always applies, even if you're not a citizen, resident or even visitor to the EU.
- s_dev 7y agoGDPR applies to EU citizens globally. It's just not enforced globally. The company will have to be large enough to have a presense (or future presense) in the EU for there to be an tangible impact. >Declaring yourself Irish doesn't make you fall under GDPR protection if you live outside the EU. I'm a DPO and this is absolutely incorrect.
- _-___________-_ 7y agoCan you provide a source? All information I'm able to find says that it applies to EU & EEA residents, with no mention of citizenship being relevant. Edited to add: https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_guidelines_3_2018_territorial_scope_en.pdf https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_gui... (it's not even residency that is key - just being present in the EU+EEA)
- s_dev 7y agoHere is the official source -- you aren't exactly providing many sources yourself beyond repeating what you've "seen": https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/application-regulation/who-does-data-protection-law-apply_en https://ec.europa.eu/info/law/law-topic/data-protection/refo...
- _-___________-_ 7y agoUh... did you read the page you linked to? The word "citizen" does not appear anywhere on it, and it finishes with this pretty clear line: > Provided your company doesn't specifically target its services at individuals in the EU, it is not subject to the rules of the GDPR. (note in the EU - no mention of citizenship)
- vonmoltke 7y agoThat page has no reference to citizenship, and multiple to location. It contradicts what you claim it supports.
- _-___________-_ 7y ago