Disabling shady advertising networks for EU costs a lot to implement?
Verify what? That the news are in fact written in English?
...that can be an expensive question to answer if you're trying to be in compliance and don't know what compliance means.
Even an answer of "you need to do nothing" can be pretty expensive.
Whether or not someone has already been fined (even within your constraints) influences the risk decision, but it does not remove the risk. Since there is still risk, it must be weighed against the organization's risk tolerance.
Evidently, the risk still exceeds the risk tolerance of several smaller websites.
Try again.
I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles.
They say, without refuting anything.
>I take it you have rock falling from the sky insurance as well? And don't forget about the crocodiles.
I have life insurance, yep! Which includes accidents, etc. Not that either of those situations is remotely analogous to GDPR fines.
Edit: I should make it clear that I don't operate the sites, so if your upset about what conclusion these websites came to, take it up with them. I am just pointing out that there still is a risk, and it is obvious that this remaining risk matters to some of these sites as they choose not to serve EU visitors. Do I block EU citizens from my site? No, I don't.
lawyer: so there's this new EU law that could get us in trouble if we keep using google analytics and an EU citizen tries to access our site
manager: do we have to comply?
lawyer: we could, but it would require work. we can also just block visitors from the EU and not have to worry about it at all
manager: ok moving on
* Logs, including firewall logs, web server logs, WAF logs, flow logs, etc. (Remember: Under a number of legal interpretations of GDPR, an IP address is a unique identifier.)
* Any comment sections, feedback forms, contact forms, etc.
* WAF, Anti-Bot, DDoS protection.
* Any third party vendors used in serving the site, and the specific integrations.
* Advertisements, which the side probably depends on for a lot of its income.
you clearly have not dealt with GDPR. you have 3 options:
1. you do it properly. it will cost a lot of time and money. you will need to hire or sub contract. sometime subcontracting costs even more than hiring.
2. you completely ignore the problem. you hope some activist won’t notify the european authorities.
3. you put up a firewall.
the cheapest and safest route is 3.
has that ever happened?