4 ms·

Since it collects personally identifiable information (at least IP addresses, but it's not clear where it stops) this requires special treatment under GDPR: htt

Since it collects personally identifiable information (at least IP addresses, but it's not clear where it stops) this requires special treatment under GDPR: https://en.wikipedia.org/wiki/Google_Analytics#Privacy https://en.wikipedia.org/wiki/Google_Analytics#Privacy

brobinson 5y ago
Why does an unmonetized website about US court cases, presumably targeted towards Americans, need to care about GDPR?
- deleted 5y ago
  [deleted]
- dgellow 5y ago
  Because the website is accessed by Europeans, meaning it is collecting Europeans data (via google analytics). But also because California has CCPA which is more or less equivalent to GDPR (as far as I understand at least. I might be incorrect).
  - brobinson 5y ago
    Got it. In that case, whatever European commission is in charge of GDPR fines can charge them a % of their $0/year income like other GDPR violators.
    - dgellow 5y ago
      I'm not sure that you understand GDPR fines, the annual revenue is only used as an upper limit for companies with massive revenue. The service being free doesn't protect you. > The less severe infringements could result in a fine of _up to €10 million, or 2% of the firm’s worldwide annual revenue_ from the preceding financial year, _whichever amount is higher_. > The more serious infringements go against the very principles of the right to privacy and the right to be forgotten that are at the heart of the GDPR. These types of infringements could result in a fine of _up to €20 million, or 4% of the firm’s worldwide annual revenue_ from the preceding financial year, _whichever amount is higher_. Source: https://gdpr.eu/fines/ https://gdpr.eu/fines/
      - brobinson 5y ago
        Good to know. Hope the author of the site is aware of this if they ever go to Europe. They should just block European IPs like other sites do, though. It'd be safer for them and also less work.
        dgellow 5y ago
        Yep. But as I said, California CCPA is more or less equivalent to GDPR, so even this might not be enough.
- btdmaster 5y ago
  It was just an example; similar issues occur under the CCPA and other legislation. (Assuming no user is covered by GDPR, which is likely not the case.)
  - brobinson 5y ago
    This is why services simply block European IP addresses. If your options are: 1. do extra work to make your service comply with laws in areas you don't live or have any customers 2. put a blanket IP ban in place for these places where you don't live or have customers 3. do nothing Bigger companies will do number 2, and individuals/small business/small and unmonetized projects will do number 3.
- extortomatic 5y ago
  Who says this website is unmonetized? The search query stream alone is very valuable.
  - brobinson 5y ago
    There's no way to make an account, and there isn't any functionality for payment. There aren't even any Paypal/Patreon accounts or donation links. The info page on the site literally says "judyrecords is a 100% free nationwide search engine". How do you think this website is monetized in the absence of those things?

brobinson 5y ago

Why does an unmonetized website about US court cases, presumably targeted towards Americans, need to care about GDPR?

deleted 5y ago
[deleted]
dgellow 5y ago
Because the website is accessed by Europeans, meaning it is collecting Europeans data (via google analytics). But also because California has CCPA which is more or less equivalent to GDPR (as far as I understand at least. I might be incorrect).
- brobinson 5y ago
  Got it. In that case, whatever European commission is in charge of GDPR fines can charge them a % of their $0/year income like other GDPR violators.
  - dgellow 5y ago
    I'm not sure that you understand GDPR fines, the annual revenue is only used as an upper limit for companies with massive revenue. The service being free doesn't protect you. > The less severe infringements could result in a fine of _up to €10 million, or 2% of the firm’s worldwide annual revenue_ from the preceding financial year, _whichever amount is higher_. > The more serious infringements go against the very principles of the right to privacy and the right to be forgotten that are at the heart of the GDPR. These types of infringements could result in a fine of _up to €20 million, or 4% of the firm’s worldwide annual revenue_ from the preceding financial year, _whichever amount is higher_. Source: https://gdpr.eu/fines/ https://gdpr.eu/fines/
    - brobinson 5y ago
      Good to know. Hope the author of the site is aware of this if they ever go to Europe. They should just block European IPs like other sites do, though. It'd be safer for them and also less work.
      - dgellow 5y ago
        Yep. But as I said, California CCPA is more or less equivalent to GDPR, so even this might not be enough.
btdmaster 5y ago
It was just an example; similar issues occur under the CCPA and other legislation. (Assuming no user is covered by GDPR, which is likely not the case.)
- brobinson 5y ago
  This is why services simply block European IP addresses. If your options are: 1. do extra work to make your service comply with laws in areas you don't live or have any customers 2. put a blanket IP ban in place for these places where you don't live or have customers 3. do nothing Bigger companies will do number 2, and individuals/small business/small and unmonetized projects will do number 3.
extortomatic 5y ago
Who says this website is unmonetized? The search query stream alone is very valuable.
- brobinson 5y ago
  There's no way to make an account, and there isn't any functionality for payment. There aren't even any Paypal/Patreon accounts or donation links. The info page on the site literally says "judyrecords is a 100% free nationwide search engine". How do you think this website is monetized in the absence of those things?