3 ms·

GDPR applies to any organisation operating within the EU, as well as any organisations outside of the EU which offer goods or services to customers or businesse

by pxndxx 6y ago

GDPR applies to any organisation operating within the EU, as well as any organisations outside of the EU which offer goods or services to customers or businesses in the EU.

that_guy_iain 6y ago
Yes, which is not all websites. And it's not just offering goods and services but having a large customer base. It was specifically designed not to apply to small companies in other countries. For example, if you're a local newspaper website in Ohio, then GDPR does not apply to you. And it only applies to EU cizitens, it's just that it's so hard to realise who is a EU ciziten when they're within the EU that it's easier to just apply the same measures to everyone.
- unilynx 6y ago
  It applies to everyone in the EU. If you're an American inside an EU country using the local wifi, you're covered by the GDPR It applies to small companies just as much as to large companies. However if you're not really marketing to people in EU countries, the GDPR doesn't apply. So a local newspaper in Ohio need not worry about the occasional European visitor, but The Washington Post definitely does
  - that_guy_iain 6y ago
    > It applies to everyone in the EU. If you're an American inside an EU country using the local wifi, you're covered by the GDPR As far as I know GDPR states EU citizens not people within the EU. Member states' laws will cover everyone however GDPR is for EU citizens globally since that is their remit. > It applies to small companies just as much as to large companies. However if you're not really marketing to people in EU countries, the GDPR doesn't apply. So a local newspaper in Ohio need not worry about the occasional European visitor, but The Washington Post definitely does Basically you argree with what I wrote but wrote it in a way to make it look like I stated something incorrect. Why did you do that?
    - TheCoelacanth 6y ago
      You are incorrect. It applies to data about people who are in the EU and to data processing in the EU. Citizenship does not matter. See Article 3 - Territorial Scope: https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/
willcipriano 6y ago
In a similar manner, most laws in the US regarding the internet don't use phraseology like "American Citizens" or "People who live in the United States" and instead use words like "Persons" or "One", so in theory they also apply outside of the US however since the US has no jurisdiction to enforce those laws, they don't in real terms. Take a look at the CAN-SPAM act[0], then at your spam folder for an example of how this played out. [0]https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003 https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003

by pxndxx 6y ago

GDPR applies to any organisation operating within the EU, as well as any organisations outside of the EU which offer goods or services to customers or businesses in the EU.

that_guy_iain 6y ago

Yes, which is not all websites. And it's not just offering goods and services but having a large customer base. It was specifically designed not to apply to small companies in other countries. For example, if you're a local newspaper website in Ohio, then GDPR does not apply to you. And it only applies to EU cizitens, it's just that it's so hard to realise who is a EU ciziten when they're within the EU that it's easier to just apply the same measures to everyone.

unilynx 6y ago
It applies to everyone in the EU. If you're an American inside an EU country using the local wifi, you're covered by the GDPR It applies to small companies just as much as to large companies. However if you're not really marketing to people in EU countries, the GDPR doesn't apply. So a local newspaper in Ohio need not worry about the occasional European visitor, but The Washington Post definitely does
- that_guy_iain 6y ago
  > It applies to everyone in the EU. If you're an American inside an EU country using the local wifi, you're covered by the GDPR As far as I know GDPR states EU citizens not people within the EU. Member states' laws will cover everyone however GDPR is for EU citizens globally since that is their remit. > It applies to small companies just as much as to large companies. However if you're not really marketing to people in EU countries, the GDPR doesn't apply. So a local newspaper in Ohio need not worry about the occasional European visitor, but The Washington Post definitely does Basically you argree with what I wrote but wrote it in a way to make it look like I stated something incorrect. Why did you do that?
  - TheCoelacanth 6y ago
    You are incorrect. It applies to data about people who are in the EU and to data processing in the EU. Citizenship does not matter. See Article 3 - Territorial Scope: https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/

willcipriano 6y ago

In a similar manner, most laws in the US regarding the internet don't use phraseology like "American Citizens" or "People who live in the United States" and instead use words like "Persons" or "One", so in theory they also apply outside of the US however since the US has no jurisdiction to enforce those laws, they don't in real terms. Take a look at the CAN-SPAM act[0], then at your spam folder for an example of how this played out. [0]https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003 https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003