3 ms·

Are you in the US? I'm asking this in a non-snarky/good faith way- if you're in the US, and the company is in the US, why would they honor a GPDR request? I und

Are you in the US? I'm asking this in a non-snarky/good faith way- if you're in the US, and the company is in the US, why would they honor a GPDR request? I understand the EU may have worded GPDR broadly, but sovereignty is still a thing- just because Europe says the law applies globally doesn't mean it really does. I don't mean this as a criticism- I've been manually deleting myself off of data broker sites for a while- just curious how that works. I see GPDR get invoked a lot here on HN, but I'm not sure people have a firm grasp on how international legal systems work. I mean, as an American I'm not subject to the legal system of Zimbabwe, Myanmar or Saudi Arabia either, even if they pass a law that says I am....

georgespencer 6y ago
No snark detected! Good question. I split my time between the US and UK. One of the interesting things about GDPR has been that a lot of non-EU information controllers appear to have adopted it as their de facto DSAR / right to be forgotten standard, so for many of these "services" GDPR works irrespective of territory (or the GDPR standard), and nearly all others have a simple format for deletion. The thing which GDPR turbocharges is that you can submit a DSAR or deletion request to _any active email address_ and it must be actioned. So you don't actually have to use the obnoxious forms they try to force you through.