|
|
|
|
|
by yarcob
1705 days ago
|
|
> any US company can implement a more stringent data policy beyond the scope of legal remit within the country of operations Theoretically, yes, you are right. But some companies are just going to say, oh, you are based in the US, let's look for a different vendor. It's not even necessarily about the GDPR. For example, US companies tend to send really shitty invoices. There's barely any info on the invoice, some don't even include the full legal name and address of the invoicer. That really sucks when the tax authorities audit you and want proof for where all your money went. If I buy services from the EU, I can assume that they comply with the GDPR, and I know that I'll get a proper invoice with VAT, and I won't have trouble with the tax authorities. |
|
VAT and invoices are part of GDPR? Financial regulations yes - sure, of which the UK is pretty darn good upon.
But if a company invoices you with bad invoices then you can just refuse them and ask the correct and resubmit - even in the USA. As you say, you need them done right for tax reasons and believe me, countries and tax laws are tight, so to ask a company to redo it with the missing information is hardly going to be an issue - more so if they want paying.
The whole aspect of assurance of compliance you make though - very valid point. Just shame such things like GDPR need to be driven by countries and not some global standard that could be audited and approved that is not tied or limited by any country.
So if there was say some International standard with an ISO number outlining such standards, companies could adopt that and get certified compliant and it gets driven that way. As with many standards, adoption by insurance/reinsurance companies goes a long way indeed.