Hacker News Reader

Comment by koolba | Hacker News Reader

> News sites within the Tronc and Lee Enterprises media publishing groups were affected.

> Tronc's high-profile sites include the New York Daily News, Chicago Tribune, LA Times, Orlando Sentinel and Baltimore Sun.

Why would either of these papers be subject to the GPDR? Am I wrong in assuming they’re purely US based companies? Or is there a chain of ownership that includes EU jurisdiction?

View on HN

If they have readers that are physically in the EU, then those readers would be covered by the GDPR.

As long as there is no business relationship to any EU entity they would not be "doing business in the EU", would they?

I doubt making a website available on the global internet would be seen as "doing business in the EU".

Doing business in the EU is only one path that causes the GDPR apply to you, processing personal data of people located within the EU, not necessarily EU citizens, is another one and probably the one relevant here.

Article 3(2): This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to: (a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or (b) the monitoring of their behaviour as far as their behaviour takes place within the Union.

But what's the worst that could happen? Your site would get dns blocked in the EU?

They are perhaps owned by media organisations that do in some way do business with the EU even if those specific outlets do not.

Maybe they could arrest employees on a visit to the EU? Maybe you could even get arrested at home due to extradition agreements? Or get assets in the EU frozen or seized? But that is all pure speculation, I have no idea what actually can and can not be done or what is likely to happen.

as soon as some of some assets pass through entities in the EU (or even, entities on wich the EU can apply pressure), they would be seized.

It's still unknown how exactly they will enforce the GDPR, but they've got data on Europeans thus need to comply. The US does this quite often as well having their laws applied to foreign companies, without them being physically present in the US.

Foreign laws are not enforceable in the US unless we a) have a treaty saying so and b) have an analogous law here. I see a lot of Europeans and tech bros that don’t seem to get this. They can make a law saying people or corporations must kiss the rings of every EU citizen no matter where they are or face fines... likewise not enforceable here, and hopefully that example makes that clear to you.

Not sure why this is getting downvoted, since it's true. As a thought experiment, why should this have any more relevance to a company that's in the US than the Thai law that prevents criticism of their king.

https://en.wikipedia.org/wiki/L%C3%A8se_majest%C3%A9_in_Thai...

I suspect what we'll see soon is a law protecting US companies from EU overreach, comparable to the SPEECH ACT.

https://en.wikipedia.org/wiki/SPEECH_Act

It would not surprise me if some US companies are holding back, because they expect similar protections from foreign law to be passed here.

Reply on news.ycombinator.com