28 ms·

To be more accurate, the EU is requiring all storage and processing to be in a country which doesn't violate EU privacy laws. That's reasonable and flexible.

scarface_74 3y ago
So people in the EU just can’t have friends in the US or communicate with people in the US? How do I process a communication between a group of friends - some in the US and some in the EU - without the data being in the US?
- kingnothing 3y ago
  Process all of it in Europe.
  - tantalor 3y ago
    Missing the /s
- tchaffee 3y ago
  As a start you'd need to read the details of GDPR laws. And probably hire a lawyer.
  - scarface_74 3y ago
    So now to create any web page compliant with the EU, I need to hire a lawyer to help me understand the 11 chapter 99 section GDPR?
    - tchaffee 3y ago
      Do you collect and store personal information for this website? I bet you could find a dozen or more websites summarizing your legal obligations if you wanted to create one web page. Since the context was Facebook, I was speaking about what businesses should do. And especially large businesses. As far as I've heard, the EU isn't chasing folks who run a small website.
      - drusepth 3y ago
        >As far as I've heard, the EU isn't chasing folks who run a small website. But they could, which has already had a chilling effect on small businesses. Even though the intent (and current enforcement) is to punish large companies, GDPR is written in a way that puts a large compliance burden on many small companies and startups.
        tchaffee 3y ago
        I have zero problem saying your startup or small business doesn't deserve to collect my personal info if you can't protect it. Doing your accounting, paying taxes, and following labor laws are also burdens on small businesses. Not every small business is profitable enough to manage those things and that's ok.
    - SideburnsOfDoom 3y ago
      In order to collect, store and process data about people in the EU, you have to do so in a manner compliant with the EU law on that. Collecting that data on a web page is a choice. A semi-hidden security benefit of GDPR is that it makes people think twice before collecting and keeping data - you can't leak data that isn't in your database in the first place.
      - scarface_74 3y ago
        If I am talking to a group of friends some in the US over Facebook messenger. Should that be stored on EU servers?
        tchaffee 3y ago
        Sure. Or any country that complies with EU data protection and privacy laws.
        SideburnsOfDoom 3y ago
        You first asked "if I create any web page". Now "Talking over Facebook messenger" is a complete change of subject. It is on Facebook, not you, to operate Facebook messenger in a legal way.
        scarface_74 3y ago
        How can Facebook both allow a user in the EU to send messages to a group of people in the US and not store data in the US?
        SideburnsOfDoom 3y ago
        > How can Facebook Run their business in a legal way? There's a word for businesses that are systemically unable to comply with the law. I don't know if Facebook is one of those, but it might be. Shutting down is always an option for that kind of company. Nothing of vale would be lost.
        3y ago
- tgv 3y ago
  A US server could store the id of the European friend, and then let the app collect the data. It's not unheard of.
  - scarface74 3y ago
    And if they go to the website?
    - tgv 3y ago
      Then their browser can get that data from another server. It may be more complex, no, it is more complex than storing everything in one large database, but it can be done.
      - scarface74 3y ago
        And that also gets rid of caching closer to the user and now you have multiple servers and no source of truth. You really don’t see the added complexity of this and how this makes a worse user experience?
        tgv 3y ago
        > You really don’t see the added complexity of this and how this makes a worse user experience? Bluntly said: IDGAF, and neither should you. Who cares if it's harder for facebook/meta to program? Must we waive our rights because of incompetent or cheap engineering?
        scarface74 3y ago
        It’s not harder for Facebook. It makes a worse user experience - just like the GDPR. You didn’t waive your rights. You as an adult have the right to not use Facebook instead of waiting for the nanny state to “protect you”
        tgv 3y ago

scarface_74 3y ago

So people in the EU just can’t have friends in the US or communicate with people in the US? How do I process a communication between a group of friends - some in the US and some in the EU - without the data being in the US?

kingnothing 3y ago
Process all of it in Europe.
- tantalor 3y ago
  Missing the /s
tchaffee 3y ago
As a start you'd need to read the details of GDPR laws. And probably hire a lawyer.
- scarface_74 3y ago
  So now to create any web page compliant with the EU, I need to hire a lawyer to help me understand the 11 chapter 99 section GDPR?
  - tchaffee 3y ago
    Do you collect and store personal information for this website? I bet you could find a dozen or more websites summarizing your legal obligations if you wanted to create one web page. Since the context was Facebook, I was speaking about what businesses should do. And especially large businesses. As far as I've heard, the EU isn't chasing folks who run a small website.
    - drusepth 3y ago
      >As far as I've heard, the EU isn't chasing folks who run a small website. But they could, which has already had a chilling effect on small businesses. Even though the intent (and current enforcement) is to punish large companies, GDPR is written in a way that puts a large compliance burden on many small companies and startups.
      - tchaffee 3y ago
        I have zero problem saying your startup or small business doesn't deserve to collect my personal info if you can't protect it. Doing your accounting, paying taxes, and following labor laws are also burdens on small businesses. Not every small business is profitable enough to manage those things and that's ok.
  - SideburnsOfDoom 3y ago
    In order to collect, store and process data about people in the EU, you have to do so in a manner compliant with the EU law on that. Collecting that data on a web page is a choice. A semi-hidden security benefit of GDPR is that it makes people think twice before collecting and keeping data - you can't leak data that isn't in your database in the first place.
    - scarface_74 3y ago
      If I am talking to a group of friends some in the US over Facebook messenger. Should that be stored on EU servers?
      - tchaffee 3y ago
        Sure. Or any country that complies with EU data protection and privacy laws.
      - SideburnsOfDoom 3y ago
        You first asked "if I create any web page". Now "Talking over Facebook messenger" is a complete change of subject. It is on Facebook, not you, to operate Facebook messenger in a legal way.
        scarface_74 3y ago
        How can Facebook both allow a user in the EU to send messages to a group of people in the US and not store data in the US?
        SideburnsOfDoom 3y ago
        > How can Facebook Run their business in a legal way? There's a word for businesses that are systemically unable to comply with the law. I don't know if Facebook is one of those, but it might be. Shutting down is always an option for that kind of company. Nothing of vale would be lost.
        3y ago
tgv 3y ago
A US server could store the id of the European friend, and then let the app collect the data. It's not unheard of.
- scarface74 3y ago
  And if they go to the website?
  - tgv 3y ago
    Then their browser can get that data from another server. It may be more complex, no, it is more complex than storing everything in one large database, but it can be done.
    - scarface74 3y ago
      And that also gets rid of caching closer to the user and now you have multiple servers and no source of truth. You really don’t see the added complexity of this and how this makes a worse user experience?
      - tgv 3y ago
        > You really don’t see the added complexity of this and how this makes a worse user experience? Bluntly said: IDGAF, and neither should you. Who cares if it's harder for facebook/meta to program? Must we waive our rights because of incompetent or cheap engineering?
        scarface74 3y ago
        It’s not harder for Facebook. It makes a worse user experience - just like the GDPR. You didn’t waive your rights. You as an adult have the right to not use Facebook instead of waiting for the nanny state to “protect you”
        tgv 3y ago