News for hackers. Stuff that matters.

A comment on GDPR penalty for passing on of IP address to Google by using Google Fonts. Parent comment

Re:GDPR penalty for passing on of IP address to Google by us... by ab_testing on Sunday January 30, 2022 @12:52PM (#30139336)
Does that also imply that do not use a cdn to serve any of your assets as that will also leak the up address to third parties.
[ Parent | on HN ]
Re:GDPR penalty for passing on of IP address to Google by us... by Jensson on Sunday January 30, 2022 @12:57PM (#30139386)
If the CDN abides by GDPR laws and doesn't process user data then it is fine. But if the CDN you use process user data for its own gain rather than just serve the request then that goes against GDPR. It is your responsibility as a developer to ensure the services you use follow these laws.

If you don't have a contract stating that the other part will honor GDPR then we will assume that the other part will misuse all data sent to them, so you aren't allowed to send any data at all.

[ Parent | on HN ]
Re:GDPR penalty for passing on of IP address to Google by us... by iammarkbro on Sunday January 30, 2022 @02:07PM (#30140049)
Does Google CDN not abide GDPR?
[ Parent | on HN ]
Re:GDPR penalty for passing on of IP address to Google by us... by Jon_Lowtek on Sunday January 30, 2022 @11:40PM (#30144542)
It does not, because of the Cloud Act and related american mass surveillance laws
[ Parent | on HN ]
Re:GDPR penalty for passing on of IP address to Google by us... by Jensson on Sunday January 30, 2022 @02:15PM (#30140125)
This was a static web address and not a CDN for this website, the company doesn't have a contract with Google about this and the user didn't go to Google.
[ Parent | on HN ]