News for hackers. Stuff that matters.

A comment on CBP Directive 3340-049B: Border Search of Electronic Devices. Parent comment

Re:CBP Directive 3340-049B: Border Search of Electronic Devices by Kim_Bruning on Sunday May 24, 2026 @05:53PM (#48261389)
For GDPR reasons alone it's probably not a good idea to take a business phone across certain borders. You run the risk of disclosing customer data to a 3rd party, if only because the customer data in your phone book counts as PII.

So long as only a few countries are doing this, it might seems doable. If everyone starts doing it, international travel becomes rather annoying to say the least. Realistically I think at some point a detente might want to be reached, with everyone agreeing not to search everyone else's electronics.

[ Parent | on HN ]
Re:CBP Directive 3340-049B: Border Search of Electronic Devices by gruez on Sunday May 24, 2026 @06:07PM (#48261498)
>For GDPR reasons alone it's probably not a good idea to take a business phone across certain borders. You run the risk of disclosing customer data to a 3rd party, if only because the customer data in your phone book counts as PII.

But "law enforcement" is specifically exempt?

https://en.wikipedia.org/wiki/General_Data_Protection_Regula...

[ Parent | on HN ]
Re:CBP Directive 3340-049B: Border Search of Electronic Devices by buzer on Sunday May 24, 2026 @11:11PM (#48263084)
Law enforcement refers to EU member states law enforcement and processing by them in their context. But even in the EU controller needs legal basis to disclose personal data to law enforcement inside the EU. Normally that is handled by local law, but it's not carte blanche, that law still needs to take e.g. rights granted by EU Charter in account.

Search by border officers may very well be GDPR breach for that controller if there was data of EU data subjects, but I don't think there is currently any case law around it.

[ Parent | on HN ]