6 ms·

Probably not a big deal if your business model doesn’t revolve around harvesting user data.

• Spivak 6y ago
  Implement a messaging system where people in two countries communicate but each person’s data must remain in their own country. Now search for users in your “add friend” dialog. Are you now querying a database per country?
  • rapind 6y ago
    So you're saying email beyond one's border can't exist under GDPR?
    • Spivak 6y ago
      No, it just makes it more complicated to stitch together since each country can’t have a full replicated copy of the data.
      • rapind 6y ago
        There's more nuance to it, but IMO this is a good thing for consumers. We've been collectively pretty horrible w/ the security of user data even when we're not sharing it w/ third-parties intentionally. Storing user data should be difficult, otherwise there's no incentive to really think about how you store it and how securely.
    • dwild 6y ago
      Well that do bring a pretty interesting question. I publish a message on my Facebook wall, can it then be kept on Facebook US database? It just like an e-mail, any recipient should be able to keep it, isn't it? Okay now I send my age, can they keep it? Why not? I send you my birth date by email, you can keep it, can't you? What's the limit, and how does it works? When I send an email, it's clear who's my recipient, so is that the limit? Recipients has to be clear? Then can a corporation be the recipient too?