5 ms·
To add, would EU privacy requirements apply even if you're just running some Gitlab or even Mastodon instance? Maybe running it as an individual vs llc changes
by judge2020 4y ago
To add, would EU privacy requirements apply even if you're just running some Gitlab or even Mastodon instance? Maybe running it as an individual vs llc changes things?
- Hanschri 4y agoGDPR applies to individuals as well as companies if they provide services to customers within the EU/EEA[0], as long as they are either a data controller or data processor, which are explained better than I can in the source below[1]. If the business is based in the US, things get a bit more complicated due to the CLOUD Act[2]. [0]: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/application-regulation/who-does-data-protection-law-apply_en https://ec.europa.eu/info/law/law-topic/data-protection/refo... [1]: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/controller-processor/what-data-controller-or-data-processor_en https://ec.europa.eu/info/law/law-topic/data-protection/refo... [2]: https://complior.se/cloud-act-and-how-the-new-american-law-can-impact-european-companies/ https://complior.se/cloud-act-and-how-the-new-american-law-c...
- Msurrow 4y agoIt doesnt apply to individuals if it is not a business. See article 2, §2, litra c https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:02016R0679-20160504&from=EN https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELE...
- 12baad4db82 4y agoIt would likely depend on the purpose and scope of the offering: https://gdpr.eu/recital-18-not-applicable-to-personal-or-household-activities/ https://gdpr.eu/recital-18-not-applicable-to-personal-or-hou...
- oytis 4y agoWell, that means anything public-facing really. You are allowed to keep contacts in your personal phone book though.
- martijnarts 4y agoGDPR applies to everyone, including individuals.
- donatj 4y agoDoes that mean I can send people requests to delete my contact info from their phone and they're legally required to comply?
- geofft 4y agoFrom GDPR article 2: > 2. This Regulation does not apply to the processing of personal data: > (c) by a natural person in the course of a purely personal or household activity My sense (I am neither a lawyer nor European so this is certainly not European legal advice) is that you cannot use GDPR to compel someone to delete your contact info if they're solely a social acquaintance, but you can use it to compel them to delete it if they're a one-person business of some sort (contractor, Etsy seller, lawyer, etc.).
- nolok 4y agoExactly, your baby sitter, your employer, your lawyer, the plumber you called two months ago ... Are covered. The person you traded phone at the bar last week, your neighbor or your coworker from last job are not.
- makeitdouble 4y agoIf they operate a service for you, yes. For instance the baby sitter you hire now and then probably keeps track of the contacts of their potential clients, and you could request deletion of your data if you don’t intend to work with them for a few years.
- dumbfounder 4y agoAnd does this mean I can do this to the collection agent trying to get me to pay 4x for a parking ticket I got in Italy 5 years ago?