Hacker News Reader

3) Don't have paying customers in the EU.

4) Get a good lawyer who is well versed in international jurisdiction issues to avoid getting dragged to an EU court anyway. Possibly operate from a non-extradition country.

View on HN

There's a reason cookie prompts aren't just in eu, afaik(maybe wrong) the law will cover even eu citizens outside of eu so idk, even if you geoblock the eu you may still have problems)

You are wrong, cf. GDPR article 3. The Belgian DPA even ruled that GDPR is unenforceable if the controller is not located in EEA, does not serve anyone in EEA, and does not monitor EU individuals. https://gdprhub.eu/index.php?title=APD/GBA_(Belgium)_-_161/2...

Because GDPR-like laws also exist in about 120 countries outside the EEA, some actually stricter than the EU GDPR. The USA is a fringe exception there.

Stop with the FUD. GDPR is not enforceable if you respect 1-3. https://gdprhub.eu/index.php?title=APD/GBA_(Belgium)_-_161/2...

Which would be covered by point 3 in my post. Also, the GDPR is not the only law that can have international ramifications.

Reply on news.ycombinator.com