Hacker News Reader

Comment by mschmitz_ | Hacker News Reader

I don't know why i should install this other than criminal activity. GDPR requires you to opt-in, so I don't need to opt-out.

View on HN

Because websites can't be trusted to follow GDPR

that's what I mean with criminal activity.

The word criminal does not mean what you think it means.

Sorry, I am not a native speaker. Whats the right word for purposefully breaking the law?

GDPR is a civil law not a criminal law. Secondly, not all websites fall until GDPR as it's an EU law and not a global one.

GDPR applies to any organisation operating within the EU, as well as any organisations outside of the EU which offer goods or services to customers or businesses in the EU.

Yes, which is not all websites. And it's not just offering goods and services but having a large customer base. It was specifically designed not to apply to small companies in other countries. For example, if you're a local newspaper website in Ohio, then GDPR does not apply to you. And it only applies to EU cizitens, it's just that it's so hard to realise who is a EU ciziten when they're within the EU that it's easier to just apply the same measures to everyone.

It applies to everyone in the EU. If you're an American inside an EU country using the local wifi, you're covered by the GDPR

It applies to small companies just as much as to large companies. However if you're not really marketing to people in EU countries, the GDPR doesn't apply. So a local newspaper in Ohio need not worry about the occasional European visitor, but The Washington Post definitely does

> It applies to everyone in the EU. If you're an American inside an EU country using the local wifi, you're covered by the GDPR

As far as I know GDPR states EU citizens not people within the EU. Member states' laws will cover everyone however GDPR is for EU citizens globally since that is their remit.

> It applies to small companies just as much as to large companies. However if you're not really marketing to people in EU countries, the GDPR doesn't apply. So a local newspaper in Ohio need not worry about the occasional European visitor, but The Washington Post definitely does

Basically you argree with what I wrote but wrote it in a way to make it look like I stated something incorrect. Why did you do that?

You are incorrect. It applies to data about people who are in the EU and to data processing in the EU. Citizenship does not matter. See Article 3 - Territorial Scope: https://gdpr-info.eu/art-3-gdpr/

In a similar manner, most laws in the US regarding the internet don't use phraseology like "American Citizens" or "People who live in the United States" and instead use words like "Persons" or "One", so in theory they also apply outside of the US however since the US has no jurisdiction to enforce those laws, they don't in real terms. Take a look at the CAN-SPAM act[0], then at your spam folder for an example of how this played out.

[0]https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003

Reply on news.ycombinator.com