4 ms·
I don't store cookies, don't even have JS on my site. But it violates the GDPR just because it's hosted in New York?
by smlavine 5y ago
I don't store cookies, don't even have JS on my site. But it violates the GDPR just because it's hosted in New York?
- lmkg 5y agoThe most recent court rulings that that because of the US CLOUD Act, all transfers of personal data to the United States are unlawful. Personal data includes IP addresses. These rulings are under appeal, but at the end of the day it's basically true that GDPR and CLOUD are fundamentally incompatible.
- cush 5y agoGDPR and INTERNET, you mean
- rovr138 5y agoSo, based on how networks and the internet works, no one from Europe can access a site if it's hosted in the US? Based on how networks work, you need to know where to send back those packets. Or do we have to all just blanket disable access to users from Europe. This is insane.
- deleted 5y ago[deleted]
- TacticalCoder 5y ago> ... at the end of the day it's basically true that GDPR and CLOUD are fundamentally incompatible. There are going to be a shitload of companies trying to offer EU-only cloud services that are going to comply with the GDPR (I'm not saying they'll all succeed, but there's obviously a market now). I don't see how the GDPR and the cloud are incompatible. I do however see how GDPR and american companies offering cloud services from servers based outside the EU are incompatible.
- lmkg 5y agoI didn't say GDPR is incompatible with cloud. I said it's incompatible with CLOUD, which is the name of the American law that causes problems. Cloud services are totally compatible with GDPR, so long as you stick to one side of the Controller/Processor divide.