Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

"no matter if it's one dude in Florida who happens to also be French."

That's not true.



Is he a French citizen? My understanding is that GDPR applies to you (in theory) if you have any EU citizens as customers.

Am I misunderstanding? Why is this incorrect?


Yes, that's incorrect, unless you are an EU business yourself. If not, you are only subject if your customers are in the EU. And more, "the mere accessibility of the controller’s, processor’s or an intermediary’s website in the Union, of an email address or of other contact details, or the use of a language generally used in the third country where the controller is established" is not enough to show that you're targeting customers in the EU.

https://gdpr-info.eu/recitals/no-23/


Thanks for that reference! Really helpful.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: