[estel]

If your company is not targeting the EU as a market you are out of scope of GDPR.

If you explicitly accept Sterling/Euros, provide localisations for EU countries, talk explicitly about your EU shipping options etc. then you would probably be seen as accommodating the EU market and might find yourself in scope.

[tlrobinson]

So basically this legislation will make it less likely websites will accept European currency and localize to European languages?

[wglb]

Consider the case of an EU citizen traveling in the US transaction in USD. This person is covered. Even if they are in the US.

[jakeogh]

Wrong. You don't get to make up new laws for the country you are visiting.

[wuliwong]

This is exactly what I was coming to HN to query about. Without some agreement with the US federal government, I don't believe they would have any mechanism of enforcement that would affect your business in the U.S. I imagine they could do something like block your site from EU ip addresses but nothing like coming after you or your company for damages.

[freeone3000]

This sort of argument is like saying you can commit murder then flee to Algeria, and the US will have no mechanism of enforcement. It's true, but heaven help you if they figure some mechanism out.

[politician]

Technically true, but what does the enforcement action actually look like against the small town ice cream shop that doesn't know or care about the rights under the GDPR of a tourist from Spain?

[icebraining]

I don't think it's even technically true. The GDPR applies to EU businesses or businesses dealing with people in the EU, not all EU citizens.

[the_mitsuhiko]

I really want to know where this idea is coming from. I do not see how GDPR applies here.

[s73v3r_]

You're gonna have to provide a citation for that.

[YetAnotherNick]

Yeah, like the sites doing that for China.