4 ms·
The emails were sent to websites that do not process personal information and are thus not subject to GDPR, so the recipients were in some cases confused about
by mrtranscendence 5y ago
The emails were sent to websites that do not process personal information and are thus not subject to GDPR, so the recipients were in some cases confused about what their responsibilities would be. And though the emails did not suggest that legal action was pending, they do suggest a willingness to resort to legal action in a relatively short time frame. This caused anxiety for apparently many small-time, non-profit bloggers.
Is it unethical? I dunno. But it's nuanced, at least.
- eclipsetheworld 5y agoAs soon as the client's IP address touches your server you are processing personal information. E.g. I have seen many webserver which save these in their access logs. Again, this is the reality of GDPR. It is not okay to operate a website serving EU visitors without considering GDPR implications. This is how GDPR is intended. Don't operate a website serving EU visitors if you don't have a plan on how to respond to these emails. I'm not trying to be harsh or dissuade these small websites from operating. It is just the reality of GDPR.