Hacker News Reader

GDPR allows sharing & processing your data if it can be reasonably assumed that it’s necessary for providing the service and in the user’s benefit.

If WHOIS is how domain business works then there shouldn’t be a problem? It’s necessary for you to get the domain which would also be in your benefit if you’re buying a domain?

See: 6(1)(a) to 6(1)(f)

Correct me if I’m wrong :)

View on HN

Not if it can be reasonably assumed, no. It is allowed if it is necessary, and it's hard to argue why for b)-f) why making the data public is necessary to satisfy these points, vs e.g. the data being made available on request if an appropriate need is demonstrated, or only some contact information being provided.

Core part of all this that you can not just say "this is how we work", you have to justify why you work like that if you require data/processing of it.

Reply on news.ycombinator.com