Hacker News Reader

Comment by orasis | Hacker News Reader

You can also flip GDPR on its head - should American web sites be subject to European laws?

The same goes for the US - should US laws really hold so much sway in other countries?

The issue isn't that countries can influence each other (and each other's populations and companies), it's how they are using that power that matters.

Fiscal platforms such as margin trading or cryptocurrency exchanges are also heavily barred from servicing US citizens. It already cuts both ways.

AFAIK the EU thinks so if they service EU customers.

By the same logic as the down voters, then American web sites should be subject to Chinese law.

Or is Europe somehow more special than China?

But they only have to actually follow GDPR for European users, right?

As a practical matter, no. Legal told me I have to implement it for all users because it covers EU citizens who might be accessing our site from or living in non EU countries.

That doesn’t sound right. The EU doesn’t have jurisdiction in non-EU countries.

Schengen Agreement? I can go and visit a non EU country without getting rid of my rights.

European in terms of nationality is irrelevant, but I'm not sure if that's what you mean.

Most articles I've read on it state the user must be in Europe and taking a product/service delivered to Europe. A US tourist buying something in a store when they arrive in Europe has GDPR protection, a French tourist visiting the US (or even at home in France but buying something online to be delivered to a friend in the US) is not.

https://www.dyspatch.io/blog/gdpr-location-or-citizenship/

Right, so the equivalent here would have been if Blizzard had censored the player in China, but not in the rest of the world.

Correct. A judge just ruled that Google (I think?) did have to apply GDPR to countries outside of the EU

GDPR compliance is obligatory as long as either data controller, processor, or subject operates, resides or is temporarily passing through Europe. The only way to avoid GDPR is if say you were a US company handling Chinese data, or vice versa.

Reply on news.ycombinator.com