[agjm]

I think the Baltimore Sun probably likes Europe just fine - what they don't like are self-contradictory rule sets that can cost them $20,000,000+ on top of the cost of achieving "compliance."

'Sarah Toporoff, a Massachusetts native who works in Paris for the Global Editors Network, which promotes newsroom innovation, raised similar questions. She said U.S. newsrooms “are a benchmark for digital innovation” — and it’s important that their content be available in Europe.'

'It is naive and wholly irresponsible to think that U.S. news holds no relevance beyond U.S. borders...'

Perhaps, then, Europe should've had some international discussion about their hyper-aggressive legislation, to try and prevent this situation. I am dumbfounded that anyone thinks the U.S. corporations are to blame for not spending millions to comply with a foreign law from countries where they have no legal representation.

Preventing that sort of 'taxation without representation' is something of a popular idea over here.

https://www.niemanlab.org/2018/08/more-than-1000-u-s-news-si...

[zimpenfish]

> on top of the cost of achieving "compliance."

Compliance with GDPR is easy though - don't aggressively track and monitor European visitors. If you've stuffed your website that full with invasive trackers et al that you can't show it to Europeans for fear of broaching personal privacy legislation, you should probably have a good long think about where you've gone wrong.

[erik_seaberg]

GDPR is not merely a list of bad things to avoid, it adds a lot of ongoing burdens to every company active in the region. Hire more people. Actively investigate your own compliance. Wait months for government permission to deliver features.

There are people who aren't doing anything wrong, who did the math and decided they can't clear a profit on proving they aren't doing anything wrong.

[dmitriid]

The ongoing burden is minuscule.

What’s wrong with actively investigating your own compliance?

What government permissions are you even talking about?

[erik_seaberg]

https://gdpr-info.eu/art-36-gdpr/

[dmitriid]

Says nothing about government permissions.

You must consult in case, quote “processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk”.

[erik_seaberg]

You're free to bet $22M that they won't punish you for not waiting 8-14 weeks for their permission.