News for hackers. Stuff that matters.

A comment on GDPR penalty for passing on of IP address to Google by using Google Fonts. Parent comment

Re:GDPR penalty for passing on of IP address to Google by us... by Vespasian on Sunday January 30, 2022 @06:00AM (#30135824)
The court explicitly noted that the IP was exfilled to the United States where adequate data protection measures do not exist and that Google in particular is well known for invasive data collection

The court also noted that there was an alternative in the form of embedding the fonts directly into the website.

I'm not a lawyer, but the reasoning doesn't sound like CDNs are a problem in General, but that one should be very careful before connecting to US servers (which was always one of the goals of the GDPR)

[ Parent | on HN ]
Re:GDPR penalty for passing on of IP address to Google by us... by kevincox on Sunday January 30, 2022 @08:15AM (#30136898)
That has interesting implications for anycast CDNs. In fact do you now need a separate DNS name for europe to be sure that the DNS query doesn't get anycasted to another country ever?
[ Parent | on HN ]