GDPR for lazy people: Block all European users with Cloudflare Workers

Re:GDPR for lazy people: Block all European users with Cloud... by johannes1234321 on Friday May 25, 2018 @04:15PM (#17157501)

A point with many sites is that they use ad networks and those ad networks send localized ads to Europeans, thus the site targets (or "envisages") Europeans. Even if the actual content is about quite local things.

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by downandout on Friday May 25, 2018 @04:23PM (#17157577)

In my personal opinion, that would be both a stretch of this recital and an abusive use of the GDPR. You don’t control what ads are shown to anyone because they are served by a third party, and you have a good faith belief that you are not subject to GDPR under Recital 23. My guess is that if you used an ad network that specialized in EU ads, you’d be subject to it. But using code from a US ad network that may have some EU advertisers now or in the future shouldn’t expose you.

But I don’t disagree that some EU countries that intend to abuse the GDPR for the purpose of generating massive amounts of revenue from fines may try to make this kind of claim. One of the problems with GDPR is that when you combine unclear regulation with the lack of moral hazard that government agencies enjoy and the financial incentive of massive fines, you create a monster that will constantly seek to expand who and what is covered under it.

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by johannes1234321 on Friday May 25, 2018 @04:34PM (#17157692)

You control to whom you give the space on your site. You contract somebody to do this under the terms you negotiate with them. "This is somebody else, they are just paying me" won't work. (And well, if the ad network is GDPR compliant it is relatively little work for you to add the note, if they are not GDPR compliant they may not target Europeans)

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by downandout on Friday May 25, 2018 @04:44PM (#17157783)

Again, this argument is a stretch for sites that are otherwise immune under Recital 23. It is one that may be tested by the most abusive GDPR enforcers, but I believe that test will ultimately fail.

Regardless, it’s one more reason to block radioactive EU traffic.

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by johannes1234321 on Monday May 28, 2018 @10:50AM (#17172692)

Your page is showing European ads and you are earning money of those. For me, as a user, the ad network is an implementation choice of your business.

Probably you can offload some challenges to the ad network, if they don't tell you enough of their business, but that's between you and them. For me I'm accessing your site.

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by s2g on Friday May 25, 2018 @04:51PM (#17157857)

I don't see how you can possibly say that. If I'm serving a german an ad in german, for a german business, then how the hell am I not clearly doing business in germany?

[ Parent | on HN ]

Re:GDPR for lazy people: Block all European users with Cloud... by downandout on Friday May 25, 2018 @04:55PM (#17157894)

If I'm serving a german an ad in german

You aren’t serving any ads in the case of an ad network. You contracted with an ad network that is within the US and the site on which you served their code is not otherwise subject to the GDPR. Your intent to not serve the EU market is clear.

[ Parent | on HN ]