4 ms·

It doesn't matter whether you are there or not. If you are an EU citizen, and you're in the US, and you visit a US website and make an order from that website,

It doesn't matter whether you are there or not. If you are an EU citizen, and you're in the US, and you visit a US website and make an order from that website, that website is now supposedly required to obey EU law.

bryanrasmussen 5y ago
you are however incorrect https://www.hipaajournal.com/does-gdpr-apply-to-eu-citizens-living-in-the-us/ https://www.hipaajournal.com/does-gdpr-apply-to-eu-citizens-... "GDPR requires the personal data of an individual residing in an EU country to be subject to certain safeguards and their data rights and freedoms must be protected. When an individual leaves an EU country and travels to a non-EU country, they are no longer protected by GDPR." It was quite a common misconception when GDPR was first being formalized that it would apply to EU citizens physically located outside of the EU, indeed if you go back about 6 years you would probably find me making the same incorrect argument on HN.
- jtbayly 5y ago
  I'm open to being corrected. However, this article is about people who are living in, not visiting another country.
  - bryanrasmussen 5y ago
    the linked article specifically says "When an individual leaves an EU country and travels to a non-EU country, they are no longer protected by GDPR." and "If an EU citizen travelled to the United States and interacted with an EU business, which required the collection of their personal data, their data rights and freedoms would be dictated by US federal and state laws. GDPR would not apply." true, this is inside a section where the headline refers to people 'living' in the US (which of course implies taking up a long term residence there), but the text of the body makes clear that just traveling to the US means that, as one would normally expect, the laws of the US pertain and not the laws of the EU.
    - jtbayly 5y ago
      Thanks. TIL. What an absurd law. It makes zero sense to suddenly say that it matters where the company is if the EU citizen isn't in the EU anymore, but it doesn't matter where the company is if the EU citizen is in the EU. Either the EU can make a law apply to my website, or it can't. If it can, why does it not do it all the time? If it can't why does it claim it does? I'm personally of the opinion that they can't, and I'm going to keep acting accordingly. And I'm willing to bet so are the vast majority of other websites. If anybody sees a drastic drop in Google Fonts usage, let me know. Otherwise I'll just keep saying, "I told you so." Nobody actually believes the EU can do this.

bryanrasmussen 5y ago

you are however incorrect https://www.hipaajournal.com/does-gdpr-apply-to-eu-citizens-living-in-the-us/ https://www.hipaajournal.com/does-gdpr-apply-to-eu-citizens-... "GDPR requires the personal data of an individual residing in an EU country to be subject to certain safeguards and their data rights and freedoms must be protected. When an individual leaves an EU country and travels to a non-EU country, they are no longer protected by GDPR." It was quite a common misconception when GDPR was first being formalized that it would apply to EU citizens physically located outside of the EU, indeed if you go back about 6 years you would probably find me making the same incorrect argument on HN.

jtbayly 5y ago
I'm open to being corrected. However, this article is about people who are living in, not visiting another country.
- bryanrasmussen 5y ago
  the linked article specifically says "When an individual leaves an EU country and travels to a non-EU country, they are no longer protected by GDPR." and "If an EU citizen travelled to the United States and interacted with an EU business, which required the collection of their personal data, their data rights and freedoms would be dictated by US federal and state laws. GDPR would not apply." true, this is inside a section where the headline refers to people 'living' in the US (which of course implies taking up a long term residence there), but the text of the body makes clear that just traveling to the US means that, as one would normally expect, the laws of the US pertain and not the laws of the EU.
  - jtbayly 5y ago
    Thanks. TIL. What an absurd law. It makes zero sense to suddenly say that it matters where the company is if the EU citizen isn't in the EU anymore, but it doesn't matter where the company is if the EU citizen is in the EU. Either the EU can make a law apply to my website, or it can't. If it can, why does it not do it all the time? If it can't why does it claim it does? I'm personally of the opinion that they can't, and I'm going to keep acting accordingly. And I'm willing to bet so are the vast majority of other websites. If anybody sees a drastic drop in Google Fonts usage, let me know. Otherwise I'll just keep saying, "I told you so." Nobody actually believes the EU can do this.