3 ms·

Some context from https://termageddon.com/austrian-dpa-rules-that-google-analytics-is-not-gdpr-compliant/ https://termageddon.com/austrian-dpa-rules-that-google

by janto 5y ago

Some context from https://termageddon.com/austrian-dpa-rules-that-google-analytics-is-not-gdpr-compliant/ https://termageddon.com/austrian-dpa-rules-that-google-analy... Generally, GDPR prohibits the transfers of personal data from the European Union to a country that does not meet the same privacy protection standards as those provided by the European Union. Due to a lack of uniform privacy laws that provide significant privacy rights to individuals and the surveillance of United States intelligence agencies, the European Union has long held that the United States does not provide adequate privacy protections to individuals. So it seems that if you are an individual located in the European Economic Area then the GDPR attempts to preserve your data privacy rights. A US website can't void those rights in exchange for some fonts.

jtbayly 5y ago
Yep. So every website in the world that is using Google fonts and doesn’t somehow magically prevent every person in the EU from ever seeing their site is in violation of GDPR.
- janto 5y ago
  If a website irresponsibly collects and stores information from individuals located in the EU, then they are violating the individual's data rights. It seems like e.g. the US CLOUD act requires US businesses to provide their agencies access to any data, whether that data is hosted in the US or not. IANAL but this looks to me like even if Google uses EU based servers to host fonts, they would still be required to provide PII to US agencies. There are other non-EU countries in the world with GDPR compatible regulations.
  - jtbayly 5y ago
    So, you're not disagreeing with me.
    - janto 5y ago
      I'm tilted more towards the US being in the wrong here and should repeal some acts. I do agree with you that it applies to every website in the world when it collects info on individuals located in the EU. Penalties only seem to occur if your business operates in the EU. So some subset of websites could ignore it I guess? IANAL. Edit: Also the more I read about the GDPR (and the CLOUD act), the more I'm in favor of it.

by janto 5y ago

jtbayly 5y ago

Yep. So every website in the world that is using Google fonts and doesn’t somehow magically prevent every person in the EU from ever seeing their site is in violation of GDPR.

janto 5y ago
If a website irresponsibly collects and stores information from individuals located in the EU, then they are violating the individual's data rights. It seems like e.g. the US CLOUD act requires US businesses to provide their agencies access to any data, whether that data is hosted in the US or not. IANAL but this looks to me like even if Google uses EU based servers to host fonts, they would still be required to provide PII to US agencies. There are other non-EU countries in the world with GDPR compatible regulations.
- jtbayly 5y ago
  So, you're not disagreeing with me.
  - janto 5y ago
    I'm tilted more towards the US being in the wrong here and should repeal some acts. I do agree with you that it applies to every website in the world when it collects info on individuals located in the EU. Penalties only seem to occur if your business operates in the EU. So some subset of websites could ignore it I guess? IANAL. Edit: Also the more I read about the GDPR (and the CLOUD act), the more I'm in favor of it.