3 ms·

In terms of the GDPR, your company would need to satisfy compliance of the GDPR. For small companies this is pretty straight forward, and it definitely helps to

In terms of the GDPR, your company would need to satisfy compliance of the GDPR. For small companies this is pretty straight forward, and it definitely helps to think about this early. https://gdpr.eu/compliance-checklist-us-companies/ https://gdpr.eu/compliance-checklist-us-companies/

ghoward 4y ago
Ouch. That list looks onerous. Thank you for the link.
oytis 4y ago
Designate a representative in the EU? That doesn't seem straightforward to me, especially for a small company.
- ghoward 4y ago
  I was thinking the same thing. Even if I managed to do everything else, having to hire someone to do that would be nigh impossible.
  - tgv 4y ago
    https://gdpr.eu/article-27-representatives-of-controllers-not-in-union/ https://gdpr.eu/article-27-representatives-of-controllers-no... The obligation laid down in paragraph 1 of this Article shall not apply to: * processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or * a public authority or body.
    - ghoward 4y ago
      That requirement would still apply to my hypothetical code forge, unfortunately.
      - tgv 4y ago
        But then it's precisely the kind of processing the EU rightly wants to address, and not only because it's the USA: China is a similar case. But that doesn't matter to you. As long as you're too small to have a server and a (part-time) "controller" inside the EU, you seem to be out of luck (note: IANAL; there might be another way; cooperation with another small company, perhaps?).
        ghoward 4y ago
        I agree with you. I also think consumer privacy protection is important, so I'm not mad at the EU here. I'm mad at the US government for the CLOUD Act.

ghoward 4y ago

Ouch. That list looks onerous. Thank you for the link.

oytis 4y ago

Designate a representative in the EU? That doesn't seem straightforward to me, especially for a small company.

ghoward 4y ago
I was thinking the same thing. Even if I managed to do everything else, having to hire someone to do that would be nigh impossible.
- tgv 4y ago
  https://gdpr.eu/article-27-representatives-of-controllers-not-in-union/ https://gdpr.eu/article-27-representatives-of-controllers-no... The obligation laid down in paragraph 1 of this Article shall not apply to: * processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or * a public authority or body.
  - ghoward 4y ago
    That requirement would still apply to my hypothetical code forge, unfortunately.
    - tgv 4y ago
      But then it's precisely the kind of processing the EU rightly wants to address, and not only because it's the USA: China is a similar case. But that doesn't matter to you. As long as you're too small to have a server and a (part-time) "controller" inside the EU, you seem to be out of luck (note: IANAL; there might be another way; cooperation with another small company, perhaps?).
      - ghoward 4y ago
        I agree with you. I also think consumer privacy protection is important, so I'm not mad at the EU here. I'm mad at the US government for the CLOUD Act.