Clarifying GDPR

Re:Clarifying GDPR by icebraining on Friday December 28, 2018 @12:21PM (#18778045)

Seems good overall, but unfortunately the article reinforces the myth that the GDPR applies to EU citizens. The regulation never mentions citizenship; for non-EU companies¹, it applies to "data subjects who are in the Union". A French citizen living in the US is not "in the Union", yet an US citizen living in France is.

¹ EU companies/organizations have to apply the GDPR to everyone

[ Parent | on HN ]

Re:Clarifying GDPR by ksec on Friday December 28, 2018 @09:26PM (#18781364)

So why can't we have a GDPR notice only for IP coming from EU, and the notice will have a single accept all button and call it a day ?

GDPR is so much hassle right now that hurt small business more than those big Internet giants.

[ Parent | on HN ]

Re:Clarifying GDPR by Doxin on Monday December 31, 2018 @08:17AM (#18794362)

"accept-all" style buttons are explicitly no longer allowed. This is a good thing as now on most websites I get a decline option that actually works, as opposed to previously where the options were "accept" or "gtfo".

[ Parent | on HN ]

Re:Clarifying GDPR by icebraining on Saturday December 29, 2018 @04:39AM (#18782856)

Accept all what? If you're a regular business and aren't tracking your users, you (probably) don't need to show anything at all. As the article says, consent is just one of six legal bases for storing user data.

I disagree that the GDPR is "so much hassle". Just look at the checklist in the article, it's nothing special.

[ Parent | on HN ]