Hacker News new | ask | show | jobs
by simonjgreen 759 days ago
Are you intentionally not mentioning which country and law?
3 comments

GDPR, EU. You cannot simply load third party shit on your website, without asking for consent. By downloading an SVG from a third party provider, I would need to ask the visitor, whether transmitting their IP address is OK or not, since that is personal data. Aside form all the information associated with when someone accesses the site.
> You cannot simply load third party shit on your website, without asking for consent

That's not how the GDPR works at all. If it were, there would be no content distribution networks operating in the EU. Linking to a third party image in document markup does not involve you transmitting anything.

By including external references to third-parties, you’re effectively leaking your visitors’ IP addresses to the third-party. Those IP addresses are considered PII and are covered by the GDPR.

https://www.theregister.com/2022/01/31/website_fine_google_f...

Gotcha, thanks
My bet is EU and making it non-compliant with GDPR.
They definitely are and I would bet money it's China.
China has laws against loading content from third parties without consent? Sounds more like an EU thing.
China has laws against graphic displays of blood. I could not find a European country that does.
How is that relevant?