4 ms·
GDPR Article 5, 1(b): > Personal data shall be: […] collected for specified, explicit and legitimate purposes and not further processed in a manner that is inc
by wizzwizz4 4y ago
GDPR Article 5, 1(b):
> Personal data shall be: […] collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’);
- thayne 4y agoSo it would have to come from someone in the EU.
- insanitybit 4y agoThe GDPR applies in the US but I do think that PayPal is likely only using US numbers for this "feature" because the EU is much more aggressive about protecting users.
- wizzwizz4 4y agoThe GDPR actually only applies in the EU. You're probably thinking of the CCPA which applies worldwide.
- insanitybit 4y agoAh, yeah you're right, I got jumbled.
- zeeZ 4y agoThe GDPR applies to: 1. a company or entity which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or 2. a company established outside the EU and is offering goods/services (paid or for free) or is monitoring the behaviour of individuals in the EU.
- wizzwizz4 4y agoYup! Something needs to be in the EU for the law to apply. It (sadly, imo) doesn't apply to EU citizens resident in, say, Texas.