News for hackers. Stuff that matters.

A comment on Discord Inc. fined 800 000 euros by the CNIL, GDPR regulator in France. Parent comment

Re:Discord Inc. fined 800 000 euros by the CNIL, GDPR regula... by dandellion on Thursday November 17, 2022 @08:50AM (#33638824)
Probably nothing happens. I doubt they're going to spend time investigating a company that doesn't do any business in Europe, when there's a very long list of bigger companies that do operate here and break our privacy and sell our data.
[ Parent | on HN ]
Re:Discord Inc. fined 800 000 euros by the CNIL, GDPR regula... by akuji1993 on Thursday November 17, 2022 @09:16AM (#33639156)
If the company doesn't do any business in Europe it has no users in Europe, therefore it doesn't have to comply with the GDRP at all.
[ Parent | on HN ]
Re:Discord Inc. fined 800 000 euros by the CNIL, GDPR regula... by blibble on Thursday November 17, 2022 @09:39AM (#33639453)
GDPR is extra-territorial and its rights apply to EU citizens wherever they are in the world

if a EU user is in the US ON HOLIDAY! and they're using your service, you're subject to the GDPR

(in theory)

[ Parent | on HN ]
Re:Discord Inc. fined 800 000 euros by the CNIL, GDPR regula... by buzer on Thursday November 17, 2022 @11:40AM (#33641471)
No. GDPR isn't tied to citizenship. EU citizens & residents are not covered by GDPR when they are outside of EU unless member state's law applies by virtue of public international law (https://gdpr-info.eu/art-3-gdpr/).

A bit more unclear situation is if non-resident is visiting EU and uses services from their home country.

[ Parent | on HN ]
Re:Discord Inc. fined 800 000 euros by the CNIL, GDPR regula... by blibble on Thursday November 17, 2022 @12:16PM (#33642178)
like most EU law it's badly written, but it states "to such data subjects in the Union"

given "within the Union" is used separately in the next sub-article to mean physically located within, it's arguable that "in the Union" could mean citizen of

[ Parent | on HN ]