Hacker News new | ask | show | jobs
by alastairj 2973 days ago
But if it's a personal blog and I decide to sell products, it's then 'not' personal and a business and therefore GDPR will then apply. Too many things for me to be bothered with at this stage, so the easiest solution is to limit exposure to it.
1 comments

But that's not new under GDPR.

If you were handling personal data in your blog and it wasn't recreational you already needed to register with ICO (in the UK).

https://informationrightsandwrongs.com/2014/08/17/ico-indica...

> However, I asked them for clarification on this point. I noted that I couldn’t see any exemption from the obligation to register, unless it was the general exemption (at section 36) from the Data Protection Act 1998 (DPA) where the processing is only for “domestic purposes”, which include “recreational purposes”. I noted that, as someone writing a semi-professional blog, I could hardly rely on the fact I do this only for recreational purposes. The ICO’s reply is illuminating

> > if you were blogging only for your own recreational purposes, it would be unlikely that you would need to register as a data controller. However, you have explained that your blogging is not just for recreational purposes. If you are sharing your views in order to further some other purpose, and this is likely to impact on third parties, then you should consider registering.

People keep saying GDPR is imposing new restrictions. Mostly it isn't - we were just ignoring the restrictions that already existed.