News for hackers. Stuff that matters.

A comment on Google Will Soon Let Users Automatically Scrub Location and Web History. Parent comment

Re:Google Will Soon Let Users Automatically Scrub Location a... by bduerst on Thursday May 02, 2019 @04:48PM (#19812714)
You're right - Article 3 of GDPR defines the scope as applying to any user residing in the EU. If the users are not logged in then you don't know where they reside (IP address != residence), meaning any international company that operates in the EU needs to err on the side of caution for non-logged in users everywhere.
[ Parent | on HN ]
Re:Google Will Soon Let Users Automatically Scrub Location a... by jefftk on Thursday May 02, 2019 @05:03PM (#19812896)
IP address geolocation is the normal way people determine if GDPR applies.
[ Parent | on HN ]
Re:Google Will Soon Let Users Automatically Scrub Location a... by bduerst on Friday May 03, 2019 @02:42PM (#19821100)
IP address geolocation is not always accurate, can be spoofed, and is flat out wrong for EU residents who travel outside of the EU.

Maybe it's normal for a startup, but for a billion dollar company, they're not going to roll the dice on 4% revenue fines and IP address geolocation.

[ Parent | on HN ]
Re:Google Will Soon Let Users Automatically Scrub Location a... by jefftk on Friday May 03, 2019 @06:00PM (#19822669)
If you send some test requests to any big company including Google I believe you'll see they're using IPgeo.

(Disclosure: I work at Google, I'm not a lawyer, and this is not legal advice)

[ Parent | on HN ]
Re:Google Will Soon Let Users Automatically Scrub Location a... by user17843 on Saturday May 04, 2019 @05:35AM (#19825409)
Do you think my interpretation of Google not having long-term user-profiles of non-logged in users due to GDPR is correct? I read that Google has rolled out their GDPR compliance worldwide.
[ Parent | on HN ]
Re:Google Will Soon Let Users Automatically Scrub Location a... by bduerst on Wednesday May 08, 2019 @12:44AM (#19855937)
Simply using an IPGeo service doesn't mean they're not handling the GDPR compliance differently.
[ Parent | on HN ]