Hacker News new | ask | show | jobs
by rhabarba 2964 days ago
> How a company "specifically targets its services at individuals in the EU" is not clearly defined within GDPR.

Does that mean that (e.g.) German bloggers are not bound to the GDPR when they just add "made for the Swiss" to their header?
2 comments
tscs37 2964 days ago
Well, if you're in the EU you have to obviously implement the regulation either way.
link
DanBC 2964 days ago
What personal data are German bloggers gathering?
link
rhabarba 2964 days ago
IP addresses, e-mail addresses from those who comment...
link
DanBC 2964 days ago
IP addresses alone are not personal data. They're only personal data if they can be used to identify a natural person.

If someone is gathering and storing email addresses and ip addresses it seems reasonable to ask them to take industry standard measures to protect that data, and to let users know that the data is being collected.

link
rhabarba 2964 days ago
> IP addresses alone are not personal data.

According to the GDPR, they are. https://eugdprcompliant.com/personal-data/

"The conclusion is that the GDPR does consider it as such."

link