Hacker News Reader

I would be interested to hear from people with knowledge of EU and US law how shady this is in their respective jurisdictions.

I'm having a hard time imagining what they did is OK, but I'm probably wrong.

View on HN

If you can identify personal data (which if they can tie it to the user's Facebook account, that's pretty easy to do) it's likely (note: not a lawyer) a violation of the EU GDPR regulations (http://www.eugdpr.org/)

Unfortunately GDPR enforcement is about 9 months away. I don't think it applies retroactively.

Reply on news.ycombinator.com