Hacker News Reader

It's not so simple. A German citizen in the US is protected by the GDPR if he uses a EU company's service, even a US citizen in the US is then protected by GDPR.

Here it is the same, if he uses EU Google he is protected, because of the switch to Google Malaysia he isn't anymore.

View on HN

I disagree, even EU companies don't have to adhere to the GDPR if they don't target EU countries. Google doesn't have to adhere to the GDPR for people in the US, whether they're EU citizens or not.

Companies have to, see Article 3. GDPR triggers whenever the processing is done by a company located in the EU or targeting users located in the EU.

Google probably does not as they surely don't do processing of non-EU user's data within their EU subsidiaries.

Reply on news.ycombinator.com