It has held up quite well so far.
https://www.pinsentmasons.com/out-law/guides/international-t...
https://www.pinsentmasons.com/out-law/guides/international-t...
I'll wait to see how it holds up when the EU tries to enforce it against a US website with no presence of any kind in the EU.
That's called moving the goalposts.
But even in that case: the EU has a lot of power and no matter what you are still required to have a legal presence in the EU if you want to serve EU customers. Breaking the law is generally not the best course of action for any company that wants to stay in business over the longer term.
No, it isn't. That's the test.
> no matter what you are still required to have a legal presence in the EU if you want to serve EU customers.
That's nonsense. There is nothing stopping EU citizens from buying something via my US based website while they are in the EU, and I have no obligation to have any kind of presence in the EU.
Ignorance of the law is not an excuse for breaking the law.
https://ico.org.uk/for-organisations/dp-at-the-end-of-the-tr...
https://gdpr-info.eu/art-27-gdpr/
You seem to be arguing from how you believe it should work or how you think it works without knowing how it actually works, which is quite important when you are operating a business.
Practicality > useless laws
The Deloitte page I linked to gives a Chinese web store located in China with no EU presence as an example.
It's bonkers that the EU thinks they can enforce their laws in a situation like that. But then, that's why it hasn't been tested.
It's basically a 'feel good' law with no teeth (at least the extraterritorial aspects).
It will drive Europe to a sort of digital isolationism where offshore companies will either a) dismiss and continue b) cease operations there.
I think it's like I said, it's a lot of "feel good" laws.
> It will drive Europe to a sort of digital isolationism where offshore companies will either a) dismiss and continue b) cease operations there.
I think it's more likely the US adopts a softer version of the GDPR, and it will be the EU and the US and the Commonwealth countries vs pretty much other more restricted Internet 'islands'.
I really hope we have a working decentralized alternative before that happens. It's something I want to start contributing to later this year, because I think it really needs to be a priority.
You seem maybe out of our depth in this discussion. I'm not sure why you take me pointing out that truth of the matter that the GDPR is unprecedented in its extraterritoriality as an attack, but it's not. This mistake is clouding all of your replies and input into this discussion.
I'm fully aware of the law. That's what has been being discussed up until this point. The whole point of the law is that it isn't enforceable.
> You seem to be arguing from how you believe it should work or how you think it works without knowing how it actually works, which is quite important when you are operating a business.
No, I'm arguing that the GDPR is unprecedented, and EU has tried to claim jurisdiction in areas that they simply can't enforce.
If you believe otherwise, that's fine, but almost all of the legal community disagrees with you.
That's baseless rambling, sorry.
Do you have anything to contribute other than misguided insults?