News for hackers. Stuff that matters.

A comment on GDPR penalty for passing on of IP address to Google by using Google Fonts. Parent comment

Re:GDPR penalty for passing on of IP address to Google by us... by thirdsun on Monday January 31, 2022 @03:01AM (#30145636)
> There is no need to ask for consent for every Stylesheet you load from a CDN. You’re allowed to use cloudflare, cloudfront, fastly,… - they’ll all provide the required DPA that allows you to use them without consent.

And Google doesn't? (Honest questions)

On first look serving a font from Google and a stylesheet from Cloudflare seem very, very similar things.

[ Parent | on HN ]
Re:GDPR penalty for passing on of IP address to Google by us... by Xylakant on Monday January 31, 2022 @04:40AM (#30146226)
The primary difference is that you usually have a contract with cloudflare that they host and serve your data on your behalf. A DPA would usually be part of the contract. Cloudflare also doesn’t mine the IP addresses that they gather as part of their operations to build advertising profiles.

AFAIK google fonts does not require any contract. Google could certainly offer a contract, a DPA, etc., assert that they are subject to the GDPR and waive processing of the data they gather from operating google fonts as a service.

[ Parent | on HN ]