Re:GDPR penalty for passing on of IP address to Google by us...
by kall on Sunday January 30, 2022 @08:10AM
(#30136863)
That‘s what it reduces to, yes, and german courts seem set on actually creating precedents [0] for that dreadful situation.
[0] https://www.taylorwessing.com/en/insights-and-events/insight...
Re:GDPR penalty for passing on of IP address to Google by us...
by Jon_Lowtek on Sunday January 30, 2022 @10:32PM
(#30144141)
The core issue with the linked situations is that the US Cloud Act applies, which means that US governmental agencies can request access to i.e. traffic logs, without a court order for mass surveillance.
If I host my website behind Google Cloud CDN they have logs of the visitors IP. If I host my site on S3 they log the IP.
Does this mean that a visitor must insteract only with services that I own until I can get concent to use "unnecessary" third party services?
I think it is pretty significant if "necessary" is reduced to "could have don't it without". Because sure I could avoid Google Fonts, but now I need to do splitting and per-browser detection myself. Ok sure, browser font support is pretty consistent these days and I know my site just uses English and emoji in some pages. But now I can't throw that site in cloud storage. I also can't use a VPS because there are traffic logs. So I buy a server in a datacenter. But what if they have some form of traffic logs? I guess my question is where does this definition of "unnecessary" stop.