News for hackers. Stuff that matters.

A comment on Samsung Recent Security Incident. Parent comment

Re:Samsung Recent Security Incident by tcmb on Saturday September 03, 2022 @04:33AM (#32699924)
> You somehow forgot to mention that most (probably all) EU countries have laws that require you to know the birthdays of your customers

That is simply not true, not in this very general formulation. What businesses does this statement of yours apply to?

It's certainly not common for an ecommerce site to ask for your birthday on signup.

[ Parent | on HN ]
Re:Samsung Recent Security Incident by ItsTooMuch on Saturday September 03, 2022 @04:37AM (#32699942)
Any online service thanks to DSA, for example: Anything that children might use (yes, so everything - intent doesn't count). Anything where users can upload content (writing comments is enough according to our lawyer).

You picked about the only remaining thing where it's not always a requirement. It's a requirement even there if the transaction is over certain threshold (varies by local law, usually around 10k EUR) or certain categories of items (drugs, alcohol, tobacco-related, sextoys, weapons etc).

[ Parent | on HN ]