Hacker News Reader

A free service probably isn't going to get sued into compliance if you accept sign ups from EU, but if you accept payment from EU that definitely counts as 'doing business' and you should expect to comply with local regulations.

View on HN

I think the question everyone here is interested in having answered is "what if you don't?" The EU has no jurisdiction here (in my country); the law applies to the citizens of those countries. Sure, some countries might be willing to extradite you to the EU for breaking laws that apply there, but that seems rather extraordinary (in the case of a law that applies to internet sites), not to mention an outrageous abuse of power.

Presumably the main consequence is they shut down your business in their country, and if you dodge fines etc they don't let you come back.

Extradition would be quite reasonable if you were conducting a very large business, and/or ignoring significant laws, e.g. prohibition on human trafficking. But they aren't going to extradite you for failing to be GDPR compliant on $10 of app sales.

I accept payments from the EU and do not comply with GDPR. They can't sue me in my country's court for violating their laws. It really is that simple.

They'd have no repercussions except to block my site - and I'm guessing they didn't intend GDPR to turn into an internet filter.

Reply on news.ycombinator.com