Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So what's the definition of "customer from the EU"?


In the typical web/e-commerce context someone whose IP address geolocates to an EU based end point or someone who lists their delivery address as inside the union.


The problem is that the law applies to them even if they use a proxy. If they report/sue you afterwards, you might be looking at a huge amount of trouble.


Yes, but like with all this stuff: Your intent to comply with the law carries a lot more weight than actual compliance in edge cases.


That's not very comforting when your goal is avoid having unforeseen problems like being arrested on your European vacation due to violating a law that doesn't apply to your country but you still violated because it applies to all EU citizens regardless of their geographical location.


This has never happened as far as I can detect.

The only country that does this sort of thing is the US.


If you're that worried, then stop scooping up every bit of data you find. Start asking if you actually need it.


> it applies to all EU citizens regardless of their geographical location

It does not. Article 3[1] clearly limits it to people in the EU. It says nothing about applying to EU citizens.

[1] https://gdpr-info.eu/art-3-gdpr/


People will just add a checkbox that the customer must check to complete the transaction:

[] I affirm that I an not an EU citizen.


The general direction is correct, but not the specific implementation - since it applies to everyone in the EU, no matter what their citizenship, you can just reject all transactions where the shipping address (or credit card address for virtual goods) is in the EU; and that should probably be fine.

On the other hand, if you actually want to sell stuff to EU and get a nontrivial number of deals, then no amount of weird checkboxes is going to convince the regulator that it's okay, they aren't stupid.


That's not possible according to GDPR.

Edit: downvotes? Really? Did you guys read the law at all?


If it's not possible then it's a rather breathtaking claim of authority that a non EU based business cannot exclude EU citizens.


For something you ship that wouldn't fly.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: