4 ms·

No worries at all, I don't take that personally, but may I ask what facts you think I am ignoring? The facts are as follows: 1. GDPR asserts extraterritorial

No worries at all, I don't take that personally, but may I ask what facts you think I am ignoring? The facts are as follows: 1. GDPR asserts extraterritorial jurisdiction. This is clearly documented and is within the text of the act itself. 2. This is unprecedented. There is no other law from any (lets say first world) country that asserts extraterritorial jurisdiction to anywhere even close to the GDPR. I've provided links for both of these claims. jacquesm is arguing against both of those facts, claiming they are not in fact true, and linking to US laws trying to state that are the same thing, when they are not even close. > It's enforcing rules on data sent to/from people in the EU and the servers (not just servers ofc), i.e. on companies offering their services to people in the EU. Quoting from an earlier link I posted: "Let’s say for example that you are a Chinese web shop with a website that is available in German, French and English as well. You also process multiple orders a day from individuals within the EU and ship your products to them. This will make you fall in the scope of the GDPR, even though you have no establishment in the EU and are not performing any data processing activities within the EU." The point is that that Chinese web shop can provide services to EU citizens, and the EU has no way of enforcing any aspect of the GDPR on that Chinese webs hop, and I'm pretty sure China would be the first to tell you the GDPR does not apply within its borders. > If the companies don't wish to follow the laws of a specific country (or in this case, all EU countries), they're welcome to not provide services to those users. In this case, the company could be following the laws in their home country, and be in violation of the GDPR just because an EU citizen bought something from them. In this case, the EU is responsible for blocking the website, rather than the website needing to be in compliance with the GDPR.

swores 4y ago
> "This is unprecedented. There is no other law from any (lets say first world) country that asserts extraterritorial jurisdiction to anywhere even close to the GDPR." Here's an example of that not being true: https://en.wikipedia.org/wiki/Megaupload https://en.wikipedia.org/wiki/Megaupload Or a more recent example that's related to financial/fraud regulations rather than copyright law, look at the FTX / Sam Bankman-Fried situation. Being registered in the Bahamas didn't make what FTX was doing to US customers any less illegal in the eyes of the US justice system. Or, I mentioned COPPA earlier, and that's been enforced at least once against a Chinese company - https://www.ftc.gov/business-guidance/blog/2019/02/largest-ftc-coppa-settlement-requires-musically-change-its-tune https://www.ftc.gov/business-guidance/blog/2019/02/largest-f...
- PrimeMcFly 4y ago
  > Here's an example of that not being true: That's not an example at all. I'm talking specifics here. The GDPR is the first law of it's kind that just outright asserts jurisdiction anywhere, as long as the origin took some data from an EU citizen. That is absolutely unprecedented. I'm not aware of any remotely similar law in commerce or communications in any other country. Megaupload is about an international seizure of a specific company, not farreaching broad open-ended legislation. COPPA only applies domestically, and is significantly more narrow in scope. I know wiki says the FTC asserts it has international reach, but the actual text of the legislation (https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-312 https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C...) says no such thing, and the wiki says that opinion isn't taken seriously. Also, in the case of Bytedance, they have a US presence which is why they were able to be sued in a US court: https://storage.courtlistener.com/recap/gov.uscourts.ilnd.371242/gov.uscourts.ilnd.371242.1.0.pdf https://storage.courtlistener.com/recap/gov.uscourts.ilnd.37... So yeah, I would still say it's unprecedented, I really can't see how there is anything similar.
  - swores 4y ago
    I don't really see how to argue further since you seem to be intentionally missing the point and looking for minor pedantic nuances that don't actually change the situation. So I'll let you know that I still think you're entirely wrong, and agree to disagree.
    - Zurrrrr 4y ago
      That's fine, I respect you ending the discussion if you don't feel headway can be reached. I will say I feel you are missing my point, and that you are claiming things like COPPA are equivalent because you are at a higher level of abstraction. When you get more specific, you will see that I am correct. Cheers.
lib-dev 4y ago
#2 is simply not a fact. Wikipedia has a page on extraterritorial jurisdiction. There's a list[1] of specific laws passed around the world that grant extraterritorial jurisdiction. How can you say there is no precedent? [1] https://en.wikipedia.org/wiki/Extraterritorial_jurisdiction#Application_in_specific_countries https://en.wikipedia.org/wiki/Extraterritorial_jurisdiction#...
- PrimeMcFly 4y ago
  I mean specifically in the way GDPR does it. GDPR asserts that anyone anywhere in the world must adhere to the GDPR if any EU citizens supply data to them. I'm not aware of any remotely similar laws in commerce or communications in any other country.
  - Tryk 4y ago
    Having read this comment thread I feel compelled to comment that I find your reasoning bizarre. You started out with saying: > GDPR tries to enforce its rules on servers outside of its territory. Which you then clarified to > It's still fascinating (and, I believe, a first) that the EU thinks they have extraterritorial jurisdiction just because their citizens are affected. So it would appear as if your argument is: GDPR is unique, because it exerts extraterritorial jurisdiction over servers whenever EU citizens are affected. But then people inform you that the US does not allow servers in other countries to store the data (i.e. PII) of children under 13 unless adhering to a strict legal framework. COPPA : https://en.m.wikipedia.org/wiki/Children%27s_Online_Privacy_Protection_Act https://en.m.wikipedia.org/wiki/Children%27s_Online_Privacy_... However, you won't relent. In the latest iteration of your argument you claim: > I mean specifically in the way GDPR does it. which you specify to mean >GDPR asserts that anyone anywhere in the world must adhere to the GDPR if any EU citizens supply data to them. I'm not aware of any remotely similar laws in commerce or communications in any other country. And in another comment write: >Also, in the case of Bytedance, they have a US presence which is why they were able to be sued in a US court: https://storage.courtlistener.com/recap/gov.uscourts.ilnd.37 https://storage.courtlistener.com/recap/gov.uscourts.ilnd.37... But you never ask yourself WHY ByteDance has a US presence in the first place? We could ask similar questions: Why does Facebook have a EU presence (on Ireland), why does Google?

swores 4y ago

> "This is unprecedented. There is no other law from any (lets say first world) country that asserts extraterritorial jurisdiction to anywhere even close to the GDPR." Here's an example of that not being true: https://en.wikipedia.org/wiki/Megaupload https://en.wikipedia.org/wiki/Megaupload Or a more recent example that's related to financial/fraud regulations rather than copyright law, look at the FTX / Sam Bankman-Fried situation. Being registered in the Bahamas didn't make what FTX was doing to US customers any less illegal in the eyes of the US justice system. Or, I mentioned COPPA earlier, and that's been enforced at least once against a Chinese company - https://www.ftc.gov/business-guidance/blog/2019/02/largest-ftc-coppa-settlement-requires-musically-change-its-tune https://www.ftc.gov/business-guidance/blog/2019/02/largest-f...

PrimeMcFly 4y ago
> Here's an example of that not being true: That's not an example at all. I'm talking specifics here. The GDPR is the first law of it's kind that just outright asserts jurisdiction anywhere, as long as the origin took some data from an EU citizen. That is absolutely unprecedented. I'm not aware of any remotely similar law in commerce or communications in any other country. Megaupload is about an international seizure of a specific company, not farreaching broad open-ended legislation. COPPA only applies domestically, and is significantly more narrow in scope. I know wiki says the FTC asserts it has international reach, but the actual text of the legislation (https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-312 https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C...) says no such thing, and the wiki says that opinion isn't taken seriously. Also, in the case of Bytedance, they have a US presence which is why they were able to be sued in a US court: https://storage.courtlistener.com/recap/gov.uscourts.ilnd.371242/gov.uscourts.ilnd.371242.1.0.pdf https://storage.courtlistener.com/recap/gov.uscourts.ilnd.37... So yeah, I would still say it's unprecedented, I really can't see how there is anything similar.
- swores 4y ago
  I don't really see how to argue further since you seem to be intentionally missing the point and looking for minor pedantic nuances that don't actually change the situation. So I'll let you know that I still think you're entirely wrong, and agree to disagree.
  - Zurrrrr 4y ago
    That's fine, I respect you ending the discussion if you don't feel headway can be reached. I will say I feel you are missing my point, and that you are claiming things like COPPA are equivalent because you are at a higher level of abstraction. When you get more specific, you will see that I am correct. Cheers.

lib-dev 4y ago

#2 is simply not a fact. Wikipedia has a page on extraterritorial jurisdiction. There's a list[1] of specific laws passed around the world that grant extraterritorial jurisdiction. How can you say there is no precedent? [1] https://en.wikipedia.org/wiki/Extraterritorial_jurisdiction#Application_in_specific_countries https://en.wikipedia.org/wiki/Extraterritorial_jurisdiction#...

PrimeMcFly 4y ago
I mean specifically in the way GDPR does it. GDPR asserts that anyone anywhere in the world must adhere to the GDPR if any EU citizens supply data to them. I'm not aware of any remotely similar laws in commerce or communications in any other country.
- Tryk 4y ago
  Having read this comment thread I feel compelled to comment that I find your reasoning bizarre. You started out with saying: > GDPR tries to enforce its rules on servers outside of its territory. Which you then clarified to > It's still fascinating (and, I believe, a first) that the EU thinks they have extraterritorial jurisdiction just because their citizens are affected. So it would appear as if your argument is: GDPR is unique, because it exerts extraterritorial jurisdiction over servers whenever EU citizens are affected. But then people inform you that the US does not allow servers in other countries to store the data (i.e. PII) of children under 13 unless adhering to a strict legal framework. COPPA : https://en.m.wikipedia.org/wiki/Children%27s_Online_Privacy_Protection_Act https://en.m.wikipedia.org/wiki/Children%27s_Online_Privacy_... However, you won't relent. In the latest iteration of your argument you claim: > I mean specifically in the way GDPR does it. which you specify to mean >GDPR asserts that anyone anywhere in the world must adhere to the GDPR if any EU citizens supply data to them. I'm not aware of any remotely similar laws in commerce or communications in any other country. And in another comment write: >Also, in the case of Bytedance, they have a US presence which is why they were able to be sued in a US court: https://storage.courtlistener.com/recap/gov.uscourts.ilnd.37 https://storage.courtlistener.com/recap/gov.uscourts.ilnd.37... But you never ask yourself WHY ByteDance has a US presence in the first place? We could ask similar questions: Why does Facebook have a EU presence (on Ireland), why does Google?