Hacker News Reader

Comment by danieltillett | Hacker News Reader

Yep. It is worse that it can be a EU resident (non-citizen) visiting the the USA using a USA only service and the law as currently written still applies. Good luck.

The next fun job is working out how to remove the data from all your backups when you get a removal request.

I have taken the approach that I will comply with the general intent of the GDPR (which I did long before it existed), but not try to apply the ridiculous parts.

View on HN

"Yep. It is worse that it can be a EU resident (non-citizen) visiting the the USA using a USA only service and the law as currently written still applies. Good luck."

You're going to have to provide proof to back up that statement.

The regulations are ridiculously broad [0]. They appear to cover everyone in the world no matter where they are or what their citizenship. The EU seems to be aiming for a universal human right.

"The principles of, and rules on the protection of natural persons with regard to the processing of their personal data should, whatever their nationality or residence, respect their fundamental rights and freedoms, in particular their right to the protection of personal data.”

0. http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX...

That's the intro statement. That's like saying the Declaration of Independence is overly broad because it says that "all men are created equal."

See my posts down thread for the more detailed clauses.

Reply on news.ycombinator.com