That's not to mention that what's much more likely here is that a student focused and student run campus newspaper in West Lafayette, IN likely just considers the EU out of scope of their audience vs the cost of figuring out if they're GDPR compliant.
To trigger GDPR, you need to be collecting PII (of EU citizens).
What interest would a student focused and student run campus newspaper in West Lafayette, IN have in people's PII (let alone the PII of European Citizens) in the first place, and why would they be collecting it?
I for one am a little tired of EU citizens telling me something doesn’t have compliance costs when I’ve been in the room when outside counsel couldn’t agree if a brochure ware site was compliant because the logs contained IP addresses.
You may wish that the regulations didn’t make the choice of blocking EU citizens the more palatable but that doesn’t make it true.
At times it seems like the common sense behind the GDPR is not -in fact- entirely common to American (lawyers) somehow.
That can't be entirely true though, since some US states seem to have been considering similar laws recently.
Color me confused by it all. (see also an earlier comment I made in a similar conversation https://news.ycombinator.com/item?id=29126413 )