Hacker News new | ask | show | jobs
by intricatedetail 1901 days ago
> and you still need to consult with an attorney specializing in privacy.

Governments should be refunding solicitor costs to anyone needing GDPR advice. Otherwise this is just another way to add barriers. If you are on modest income you can forget about setting up a website in the EU.
2 comments
jdlshore 1901 days ago
The law is quite readable, and the various Data Protection Agencies (country-specific regulators) have provided more concrete guidance. If you're setting up a website that takes a restrained approach to personal data, you don't necessarily need an attorney.
link
stremovsky 1901 days ago
Databunker turns basically any startup to be privacy by design compliant.
link
jeffffff 1900 days ago
how does it address ip addresses in server logs?
link
stremovsky 1892 days ago
Take a look at this article: https://www.freecodecamp.org/news/how-to-stay-gdpr-compliant...
link
remus 1901 days ago
> Otherwise this is just another way to add barriers.

Personally I think pretty much everything in GDPR is just sensible guidelines for how to handle personal data, and if you're not willing to do those things then you probably shouldn't be handling personal data in the first place. Being ignorant of good data practice is not an excuse.

> If you are on modest income you can forget about setting up a website in the EU.

This is just rubbish. GDPR only applies to personal info for a start so if you don't store personal info then you have nothing to worry about. Even if you do store personal info the vast majority of use cases are really straightforward and require a very minimal understanding of the law to be compliant.

link
reitanqild 1901 days ago
Furthermore you can often ask them for help (or so I have heard).
link
Rule35 1901 days ago
> GDPR is just sensible guidelines for how to handle personal data

And yet it doesn't say "don't give it to me if you don't want me to have it."

> GDPR only applies to personal info for a start so if you don't store personal info then you have nothing to worry about.

So logging IPs is fine?

link
michaelmior 1901 days ago
IP addresses are (probably) considered personal data under the GDPR.

https://www.fieldfisher.com/en/services/privacy-security-and...

link