Intent to issue €2.5M fine to Disqus over GDPR breaches

Re:Intent to issue €2.5M fine to Disqus over GDPR breaches by M2Ys4U on Thursday May 06, 2021 @10:01AM (#27063328)

>Any EU citizen in our out of country has their PII protected by EU law, regardless of who processes that data.

No, that's wrong.

First of all, the GDPR does not take in to consideration citizenship, at all. The Regulation targets location rather than nationality. In other words, if either the data subject or data controller are in the EU/EEA then the GDPR applies, even if the other party is not in the EU/EEA (The UK GDPR is the same, but replace "EU/EEA" with "UK").

Secondly, the GDPR regulates the use of Personal Data, not PII. PII is a US legal term and has multiple definitions. Personal data is a broader concept than PII.

[ Parent | on HN ]

Re:Intent to issue €2.5M fine to Disqus over GDPR breaches by varispeed on Thursday May 06, 2021 @12:20PM (#27065529)

There is coming terreg law (already passed and will be implemented within a year) that specifically targets citizenship rather than location. https://decoded.legal/blog/2021/04/the-eus-terrorist-content...

[ Parent | on HN ]