32 karma · joined July 24, 2015
That's the biggest thing from the EU's GDPR rules - what is your organization's data inventory, how does it map outside of your organization, and how are you securing PII?
If a complaint is made from someone who is an EU citizen, and another organization shows logs that they got this information from your web app or service, that will trigger an audit from the EU. Blocking access to a subset of IP ranges will do absolutely nothing to stop this, and will not stop the sharks once they have smelled blood.
In a sense, the EU has plain rules that you can protect against, unlike the FTC/FDA (for HIPPA etc) who are vague and will not disclose how you can protect your own organization.
[1] https://en.wikipedia.org/wiki/File:VHS-Video-Tape-Top-Flat.j...
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&c...
If you want to quickly build a web project, hire some engineers, charge for your service - why not build it in RoR? This will save you time troubleshooting and learning the ropes of a new web development framework.
Also, you could always hire remote workers if it is difficult to hire locally. See: https://weworkremotely.com/
https://www.techdirt.com/articles/20150724/15501631756/smoki...