3 ms·
I think one of the relevant passages is: > Suppose you run a golf course in Manitoba focused exclusively on your local area, but sometimes people in France stu
by djoldman 5y ago
I think one of the relevant passages is:
> Suppose you run a golf course in Manitoba focused exclusively on your local area, but sometimes people in France stumble across your site. Would you find yourself in the crosshairs of European regulators? It’s not likely. But technically you could be held accountable for tracking these data.
This, combined with the <250 employees = lower obligations, seems to indicate one should worry about the GDPR but in proportion to the size of your company (outside the EU).
The bigger you are, the more seriously you should take it, I guess?
- iso1631 5y agoI don't understand how that meshes with the previous paragraph > The Internet makes goods and services in far-flung places accessible anywhere in the world. A teenager in Cyprus could easily order a pizza online from a local pizza shop in Miami and have it delivered to a friend’s house there. But the GDPR does not apply to occasional instances. Rather, regulators look for other clues to determine whether the organization set out to offer goods and services to people in the EU.
- tchock23 5y agoThe lower employee cap is only for some record keeping. The provisions still apply otherwise. See this article on the 30.5 section for details: https://www.scl.org/articles/10114-article-30-gdpr-what-does-the-paragraph-5-exemption-really-mean-for-smaller-organisations https://www.scl.org/articles/10114-article-30-gdpr-what-does...