News for hackers. Stuff that matters.

A comment on Build your own private WireGuard VPN with PiVPN. Parent comment

Re:Build your own private WireGuard VPN with PiVPN by oh_sigh on Friday May 05, 2023 @12:35PM (#35831691)
No, it isn't. see article 3, section 2 of the regulation. You need to offer goods or services to EU citizens for the law to be in effect. If home Depot doesn't operate in Europe, doesn't market to Europeans, doesn't ship to Europe, and doesn't offer any services to Europeans, then they are not impacted by gdpr.
[ Parent | on HN ]
Re:Build your own private WireGuard VPN with PiVPN by doix on Friday May 05, 2023 @06:04PM (#35835665)
> 2. This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to:

> (a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or

> (b) the monitoring of their behaviour as far as their behaviour takes place within the Union

Did I quote the correct section? Doesn't collecting all the analytics fall under section B? I'm not a lawyer of course, but it seems pretty reasonable to me that if you have interest in the EU market, blocking them is easier than figuring out if GDPR applies to you or not.

Or you could just not spy on your users of course, but I guess I'm too pessimistic to see that as an option a company would choose.

[ Parent | on HN ]
Re:Build your own private WireGuard VPN with PiVPN by ElectricalUnion on Friday May 05, 2023 @06:07PM (#35835696)
> You need to offer goods or services to EU citizens for the law to be in effect.

You need to not sell goods and services to EU citizens for the law to not be in effect.

Even if said citizens are in the US. You don't cease being a EU citizen when you're traveling.

[ Parent | on HN ]
Re:Build your own private WireGuard VPN with PiVPN by oh_sigh on Friday May 05, 2023 @10:04PM (#35837278)
The first part of section 2 says the data subjects need to be in the Union. A European moving to America and shopping at home Depot doesn't (alone) require them to be GDPR compliant.
[ Parent | on HN ]