Hacker News Reader

Hacker News

Comment by jtbayly | Hacker News Reader

Parent Full thread

jtbayly

Which of the following are you disputing?

1. GDPR is an EU law that claims to apply to every single website in the world, mandating certain things regarding PII.

2. A court has now determined that using Google Fonts on a site will make it noncompliant with GDPR.

3. Thus, any site that currently uses Google Fonts is currently in violation of that EU law called GDPR.

If you are objecting to #3, please explain why it doesn't follow from 1 & 2.

Regardless, when you say I'm intentionally and knowingly spreading "horseshit," it's completely untrue and uncalled for. An apology would be nice.

View on HN

> 1. GDPR is an EU law

Yes

> that claims

laws claim nothing

> to apply to every single website in the world,

No non nein no no no no no

> mandating certain things regarding PII

well 2 out of 4 aint bad

> 2. A court has now determined that using Google Fonts on a site will make it noncompliant with GDPR.

Sure thing.

> 3. Thus,

I sense a wild extrapolation inbound....

> any site that currently uses Google Fonts is currently in violation of that EU law called GDPR.

No, any site that currently uses Google Fonts AND IS HOSTED IN OR VIEWED FROM THE EU is currently in violation of that EU law called GDPR.

GDPR is not international law, its not a global law, its not Europe telling the US what to do, its actually not about you at all. On the other hand, if you would like to do business with europe, we have some things we would like you to do, if you do not wish to do them, you are free (we all know americans love their freedom fries) to not do any of the things we require and stay out of our jurisdiction.

If you have a website in the US, and a person in the US visits it, unlike your repeated claims - the EU neither wants nor needs nor considers it to be anything to do with anything that they give the slightest of shits about. You, me and the brick wall all know this to be true.

So it requires every website in the world to interact a certain way with every single EU visitor.

So you’ve confirmed that it applies to every website in the world. I don’t see how I can put a website up without being affected by GDPR. If I am affected the moment I put a site up, then it applies to every site.

The internet is worldwide by default. I have no ability to prohibit people in the EU from seeing my site.

> So it requires every website in the world to interact a certain way with every single EU visitor.

Yes

> So you’ve confirmed that it applies to every website in the world.

Here we go again

> I don’t see how I can put a website up without being affected by GDPR.

Dont serve it into the EU. So we have firmly established it does not apply to every site in the entire galaxy.

> If I am affected the moment I put a site up, then it applies to every site.

It doesnt apply if you dont serve it into the EU, so no it doesnt apply to every site in the entire galaxy.

> The internet is worldwide by default.

The default is 0.0.0.0 - the default is also unencrypted - the default is no password - the default is a lot of things that nobody in the world would do.

> I have no ability to prohibit people in the EU from seeing my site.

So you have the ability to publish a site, but not the ability to control that site, why am I not shocked. A bit like having a car and blaming everyone for not getting out of the way when you use it.

Do you have any idea how contrary this is to the philosophy of the web? It's called the "internet" because everybody is interconnected on it. It's called the "World Wide Web" because when you post, it's available to the whole world.

And somehow I'm an idiot because I expect 99.99999% of websites, including my own, to be available anywhere in the world?

Go live in China if you like Great Firewalls so much.

> Do you have any idea how contrary this is to the philosophy of the web?

wtf is the philosophy of the web? Is this the laws of the internet? I dont live on the internet so the internet doest have jurisdiction over me.

> It's called the "internet" because everybody is interconnected on it.

internet - 1970s (denoting a computer network connecting two or more smaller networks): from inter- ‘reciprocal, mutual’ + network. So no, thats not why its called the internet.

> It's called the "World Wide Web" because when you post, it's available to the whole world.

Its like the world series of baseball then? it was actually called mesh first. Its called the world wide web now because tbl came up with that name for the first browser program to browse the mesh which for years only existed in europe.

> Go live in China if you like Great Firewalls so much.

So now you are now saying you dont expect 99.99999% of websites, including my own, to be available anywhere in the world. Why only 99.99999%? You want to exclude some? Which in particular? Why? Who gets to decide?

You are proposing a bizarre situation whereby no country would have control over their own laws, if something is illegal in the US, say child porn, you just go to a website from a country where it is legal (and somehow that is legal now??). Somehow you seem to suggest it is a moral obligation that it be available to the entire world as well for fear of falling foul of the philosophy of the internet.

If the EU thinks my site is illegal, then the EU can block it. Or, alternatively, they can arrest people in the EU who they actually have authority over for visiting it.

LOL

Have fun on your little power trip. And good luck with it. Let me know once just 5% of the websites available in the EU stop using Google fonts. Lol

> 1. GDPR is an EU law that claims to apply to every single website in the world, mandating certain things regarding PII.

GDPR only applies if you specifically target EU citizens, are in the EU, are an EU citizen, make any money from the EU, etc.

Show me where GDPR only applies if I specifically target EU citizens. I was under the impression that it applied if somebody in the EU visited my website.

Some context from https://termageddon.com/austrian-dpa-rules-that-google-analy...

  Generally, GDPR prohibits the transfers of personal data from the European Union to a country that does not meet the same privacy protection standards as those provided by the European Union. Due to a lack of uniform privacy laws that provide significant privacy rights to individuals and the surveillance of United States intelligence agencies, the European Union has long held that the United States does not provide adequate privacy protections to individuals.

So it seems that if you are an individual located in the European Economic Area then the GDPR attempts to preserve your data privacy rights. A US website can't void those rights in exchange for some fonts.

Yep. So every website in the world that is using Google fonts and doesn’t somehow magically prevent every person in the EU from ever seeing their site is in violation of GDPR.

If a website irresponsibly collects and stores information from individuals located in the EU, then they are violating the individual's data rights.

It seems like e.g. the US CLOUD act requires US businesses to provide their agencies access to any data, whether that data is hosted in the US or not. IANAL but this looks to me like even if Google uses EU based servers to host fonts, they would still be required to provide PII to US agencies.

There are other non-EU countries in the world with GDPR compatible regulations.

So, you're not disagreeing with me.

I'm tilted more towards the US being in the wrong here and should repeal some acts. I do agree with you that it applies to every website in the world when it collects info on individuals located in the EU. Penalties only seem to occur if your business operates in the EU. So some subset of websites could ignore it I guess? IANAL.

Edit: Also the more I read about the GDPR (and the CLOUD act), the more I'm in favor of it.

Reply on news.ycombinator.com