3 ms·
Note that GDPR talks about data minimisation - data you should not share more data then necessary. If there are no other way then linking to a third party then
by Puts 5y ago
Note that GDPR talks about data minimisation - data you should not share more data then necessary. If there are no other way then linking to a third party then that would be just fine. But if there is another way to do it that don't requires you to share someone else data you should do that instead (in this case self host the fonts).
Also consent may not actually help here because the principle of data minimisation applies no matter what legal basis for the processing you use.
- Jyaif 5y agoBy that logic it sounds like you must use your own servers to host the data, otherwise you are sharing the IP with a cloud provider.
- netizen-936824 5y agoIts only a problem if its a company (and/or) using servers outside of the EU.
- Puts 5y agoYou could absolutely make that argument. That is why this particular case is so interesting. This is the first time I've seen a ruling regarding this and it may open up for more cases on where to draw the line on when processing is "necessary" and not. Also it's worth noting that GDPR also puts other demands in place, for example that there be technical measures to protect the data from unauthorized access, or unintentional data loss. If you can argue that a cloud provider can handle those things better, then that may trump the data minimization argument.