Hacker News new | ask | show | jobs
by parchley 1397 days ago
You might want to read up on the Schrems II (2) case regarding the GDPR and a US company.
2 comments

Yes, but this largely due to the US CLOUD act [0], and in my opinion, rightfully so. The US needs to get their privacy shit together.

Now, is it realistic that it will be illegal for EU providers to use services that are owned by US companies? Very unlikely that this will be the precedent (yes, I know, there are cases where some courts deemed Google Analytics and Google Fonts illegal).

However, I would personally also feel more comfortable using services from countries where the government can't subpeona all data at will.

https://en.wikipedia.org/wiki/CLOUD_Act

What world are we in where a guy hosting a blog needs to read about GDPR.
It's a bit like in the 1960s and '70s when musicians regularly ended up in serious tax debt because they genuinely didn't realize that they should file proper returns.

"I'm just a guy who shows up, they hand me some cash, and then I go up on stage and play my guitar. Why do I need to read up on accounting?"

Some software developers are in that state of naïveté about the data they collect about their users.

Even if it's just a blog, it may be collecting and storing data about readers in many different ways: ads, tracking pixels, comment logins, etc.

On a grand scheme, it’s also naive to think that GDPR is going to protect end-users. It’s a good attempt but really just a ‘badge’ that websites put on and a nuisance for mobile users.
A world where that person might want to track users or sell privacy intrusive advertisments on their blog.
I think realistically for a single person blog if you don’t reside in the EU you can just ignore the GPDR. What are they gonna do, sue you?
Even if you ignore the GDPR because it doesn’t apply to you it might be nice to know the company you’re buying hosting from has to comply with it.
OP is Italian, so that's not an option.

And even if you don't reside in the EU, you can reasonably believe in privacy and abide by the GDPR.

This is akin to me, at least to walking into a bar and being upset there are requirements for shoes in shirt. Nobody is forcing you on my website
No its akin to opening a bar without a sign on the outside informing you that your every word and look will be monitored, analysed and shared with big companies. But that's the great thing about GDPR. It's our rights, they apply wether you like it or not.
> they apply wether you like it or not.

The EU has ruled, now let them enforce it!