Hacker News Reader

Comment by sleepyhead | Hacker News Reader

If you are referring to GDPR then it apply to personal information, not all types of data. I don't think content in a CMS would be considered PII, thus not required to be exported. GDPR export is meant to give customers a way to see what PII is stored, not as a way to export all types of data.

View on HN

No. That's incorrect on both counts. That is neither the intent of Article 20 nor the type of data it concerns.

https://gdpr-info.eu/art-20-gdpr/ reads

> 1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller [..]

https://gdpr-info.eu/art-4-gdpr/ reads

> ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); [..]

This is a completely incorrect interpretation of the concept of “personal data”. This is about information _concerning_ an identifiable person. See recital 26, https://gdpr-info.eu/recitals/no-26/

> ‘personal data’ means any information relating to an identified or identifiable natural person

Exactly. Content in your website is not information relating to an identified or identifiable natural person. GDPR does not require a company to provide export of website content. It does have a requirement to export data they have stored about you though.

Not a lawyer, but my business doesn't sound like a identifiable natural person...

It is not. If you're using some service as a business, you may be out of luck.

If however your customers are natural persons, you can migrate their data from a competitor (with their help and/or agreement).

Helping with the latter appears to be the point of Hotswap.

I beg to differ. There is almost no legal business with paying customers that wouldn’t fit under these criteria

Reply on news.ycombinator.com