Hacker News Reader

GDPR allows for this as far as i can tell (IANAL)

> Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:

> ...

> for the establishment, exercise or defence of legal claims.

if you are the controller (or data subject). ChatGPT is the Processor. Otherwise EU controller processing PII in ChatGPT have a problem now.

‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Do legal claims outside eu jurisdiction apply? Seems like too big of a loophole to let any court globally sidestep GDPR.

Reply on news.ycombinator.com