7 ms·

They're not blocked, they're blocking themselves.

by cannam 6y ago

noir_lord 6y ago
Yep, so far "We can't serve you for legal reasons AKA we won't comply with the reasonable provisions of data protection" has been met with a broad shrug.
- OwlsParlay 6y ago
  For US-based news sites they might well only get a few European visitors. I only ever get this problem for trending stories like this.
  - viraptor 6y ago
    If a US site does not have any presence in the EU and is not selling anything to the EU visitors, why would they even bother adding the blocking? They can... do nothing instead. (Or disable buying subscription to the EU)
    - solarkraft 6y ago
      Fear that it'll haunt them should they ever enter the EU, probably.
    - darekkay 6y ago
      GDPR doesn't depend on whether you're selling something. Just visiting the website from the EU is enough to require the business to comply with the privacy laws.
      - viraptor 6y ago
        It does depend on whether the law of the country applies for any reason though. Unless you're saying they should also comply with whatever CCP, Thailand, Iran, and many other countries have to say about allowed online content?
        darekkay 6y ago
        This is already the case. Yes, you have to comply with CCP laws for _China residents_ if you want to have your website available in China. It doesn't say you have to apply the laws to all people around the world. But GDPR vs. China isn't a perfect comparison, because GDPR isn't blocking any content. It is not even _about_ the content. It's about following the privacy rights that I as an EU resident have and you as an US company might be breaking.
        viraptor 6y ago
        China has the jurisdiction over the Chinese resident, their ISP and other local infrastructure. It doesn't have jurisdiction over foreign companies and foreign companies don't have to comply with anything. (Unless they want to do business with Chinese residents or operate in China) Same applies to the EU situation. You may want to be nice to the foreign visitors otherwise and comply with the foreign laws, but that's it.
        darekkay 6y ago
        > Unless they (...) operate in China Exactly. If you're operating in the EU, you are bound by the EU laws. But "operating" doesn't mean you have to sell something: > The GDPR applies to US businesses, regardless of their size in terms of revenue or staff, if at least one of the following two conditions are met: > 1. The company offers good or services (even in the absence of commercial transactions) to EU/EEA residents. > 2. The company monitors the behavior of users inside the EU/EEA. So yes, if the news website in this thread tracks me without my consent, they are violating my rights and the EU laws. I am not sure how realistic enforcing this law actually is, though, unless they have a EU branch (what you described as jurisdiction). Source: https://termly.io/resources/articles/gdpr-in-the-us/ https://termly.io/resources/articles/gdpr-in-the-us/
        viraptor 6y ago
        The website you linked brings up 2 out of 4 examples where the EU data is collected, the business is not aimed at the EU residents, and says (verbatim) "GDPR does not apply". Same reasons seem to apply to the context discussed here (news site aimed at the US region). Specifically: > Although such a website would likely track the user behavior of EU/EEA citizens, as the website would attract native speakers of several European languages, the GDPR does not apply here because: > the service does not target EU/EEA residents, and > the tracked user behavior is not occurring within the EU/EEA.
- eli 6y ago
  What's anyone supposed to do about it? GDPR didn't exactly provide funding to help anyone get compliant and it's hard to argue that GDPR compliance is a priority for a struggling local media site. It's a bummer, but I think it was inevitable in the way the law is structured.
  - jowsie 6y ago
    Doesn't take much money or effort to just not sell my data.
    - eli 6y ago
      I have no reason to assume they are selling user data. I wish complying with GDPR were as simple as not selling user data.
  - sellyme 6y ago
    > What's anyone supposed to do about it? Show a basic level of respect for your users' privacy whether or not it's not a legal requirement.
    - closeparen 6y ago
      Put your business at risk of total destruction unless a court believes that you show a basic level of respect, etc.
    - deleted 6y ago
      [deleted]
    - eli 6y ago
      Is there evidence that they aren't besides not being confident about GDPR compliance? There's a lot more to GDPR than not selling data.
      - e_proxus 6y ago
        If you just aim to provide static content, i.e. public web pages and articles I think you’d really have to “go out of your way” to break GDPR (which in this case is likely tons of ad network code among other shady things).
danellis 6y ago
They're still blocked, regardless of who is doing the blocking.

They're not blocked, they're blocking themselves.

by cannam 6y ago

They're not blocked, they're blocking themselves.

Yep, so far "We can't serve you for legal reasons AKA we won't comply with the reasonable provisions of data protection" has been met with a broad shrug.

OwlsParlay 6y ago
For US-based news sites they might well only get a few European visitors. I only ever get this problem for trending stories like this.
- viraptor 6y ago
  If a US site does not have any presence in the EU and is not selling anything to the EU visitors, why would they even bother adding the blocking? They can... do nothing instead. (Or disable buying subscription to the EU)
  - solarkraft 6y ago
    Fear that it'll haunt them should they ever enter the EU, probably.
  - darekkay 6y ago
    GDPR doesn't depend on whether you're selling something. Just visiting the website from the EU is enough to require the business to comply with the privacy laws.
    - viraptor 6y ago
      It does depend on whether the law of the country applies for any reason though. Unless you're saying they should also comply with whatever CCP, Thailand, Iran, and many other countries have to say about allowed online content?
      - darekkay 6y ago
        This is already the case. Yes, you have to comply with CCP laws for _China residents_ if you want to have your website available in China. It doesn't say you have to apply the laws to all people around the world. But GDPR vs. China isn't a perfect comparison, because GDPR isn't blocking any content. It is not even _about_ the content. It's about following the privacy rights that I as an EU resident have and you as an US company might be breaking.
        viraptor 6y ago
        China has the jurisdiction over the Chinese resident, their ISP and other local infrastructure. It doesn't have jurisdiction over foreign companies and foreign companies don't have to comply with anything. (Unless they want to do business with Chinese residents or operate in China) Same applies to the EU situation. You may want to be nice to the foreign visitors otherwise and comply with the foreign laws, but that's it.
        darekkay 6y ago
        > Unless they (...) operate in China Exactly. If you're operating in the EU, you are bound by the EU laws. But "operating" doesn't mean you have to sell something: > The GDPR applies to US businesses, regardless of their size in terms of revenue or staff, if at least one of the following two conditions are met: > 1. The company offers good or services (even in the absence of commercial transactions) to EU/EEA residents. > 2. The company monitors the behavior of users inside the EU/EEA. So yes, if the news website in this thread tracks me without my consent, they are violating my rights and the EU laws. I am not sure how realistic enforcing this law actually is, though, unless they have a EU branch (what you described as jurisdiction). Source: https://termly.io/resources/articles/gdpr-in-the-us/ https://termly.io/resources/articles/gdpr-in-the-us/
        viraptor 6y ago
        The website you linked brings up 2 out of 4 examples where the EU data is collected, the business is not aimed at the EU residents, and says (verbatim) "GDPR does not apply". Same reasons seem to apply to the context discussed here (news site aimed at the US region). Specifically: > Although such a website would likely track the user behavior of EU/EEA citizens, as the website would attract native speakers of several European languages, the GDPR does not apply here because: > the service does not target EU/EEA residents, and > the tracked user behavior is not occurring within the EU/EEA.
eli 6y ago
What's anyone supposed to do about it? GDPR didn't exactly provide funding to help anyone get compliant and it's hard to argue that GDPR compliance is a priority for a struggling local media site. It's a bummer, but I think it was inevitable in the way the law is structured.
- jowsie 6y ago
  Doesn't take much money or effort to just not sell my data.
  - eli 6y ago
    I have no reason to assume they are selling user data. I wish complying with GDPR were as simple as not selling user data.
- sellyme 6y ago
  > What's anyone supposed to do about it? Show a basic level of respect for your users' privacy whether or not it's not a legal requirement.
  - closeparen 6y ago
    Put your business at risk of total destruction unless a court believes that you show a basic level of respect, etc.
  - deleted 6y ago
    [deleted]
  - eli 6y ago
    Is there evidence that they aren't besides not being confident about GDPR compliance? There's a lot more to GDPR than not selling data.
    - e_proxus 6y ago
      If you just aim to provide static content, i.e. public web pages and articles I think you’d really have to “go out of your way” to break GDPR (which in this case is likely tons of ad network code among other shady things).

danellis 6y ago

They're still blocked, regardless of who is doing the blocking.