...that can be an expensive question to answer if you're trying to be in compliance and don't know what compliance means.
Even an answer of "you need to do nothing" can be pretty expensive.
...that can be an expensive question to answer if you're trying to be in compliance and don't know what compliance means.
Even an answer of "you need to do nothing" can be pretty expensive.
Whether or not someone has already been fined (even within your constraints) influences the risk decision, but it does not remove the risk. Since there is still risk, it must be weighed against the organization's risk tolerance.
Evidently, the risk still exceeds the risk tolerance of several smaller websites.
Try again.
I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles.
They say, without refuting anything.
>I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles.
I have life insurance, yep! Which includes accidents, etc. Not that either of those situations is remotely analogous to GDPR fines.
Edit: I should make it clear that I don't operate the sites, so if your upset about what conclusion these websites came to, take it up with them. I am just pointing out that there still is a risk, and it is obvious that this remaining risk matters to some of these sites as they choose not to serve EU visitors. Do I block EU citizens from my site? No, I don't.