Hacker News Reader

I wish the EFF offered guidelines and a certification for companies to show they are following best practices for user data. I guess GDPR is the same thing but it’d be nice if some bucks went into the EFF’s pocket to fund lobbying on our behalf.

I have a data intensive startup and I would love to show we comply.

View on HN

GDPR only applies in the EU.

Facebook already declared that they won't extend their GDPR compliance globally. So if you're in the US, you're not protected by it.

But it also applies to EU citizens living outside the EU. So the use cases get complicated.

Seriously? I did not know that. How would that work?

Edit: Just read Wikipedia and another source and both define it for people within the EU. They do mention whether the company is outside the EU and how they would need to handle the data for people within the EU.

I don't think this is true. It's not totally clear but GDPR seems to require people to be in the union. I believe that residency is the main requirement, not citizenship (a German person living in the US dealing with a US-only company is not covered).

Reply on news.ycombinator.com