Live data from Hacker News

Ask HN: Is HN GDPR compliant?

news.ycombinator.com

11–20 of 113 posts

Re: Ask HN: Is HN GDPR compliant?

#12

Why would it need to be compliant? Ycombinator is not a European company.

But if they hold and manage data for users who reside in the EU (which they do), then I believe the rules apply too.

From what I can gather, if a user in the EU approaches HN and asks for their profile data and posts to be removed, then that falls under the GDPR laws.

Re: Ask HN: Is HN GDPR compliant?

#13

Why would it need to be compliant? Ycombinator is not a European company.

Unfortunately GPDR effects any site/company that has EU visitors which is nearly all sites.

Fortunately GPDR effects any site/company that has EU visitors which is nearly all sites.

Re: Ask HN: Is HN GDPR compliant?

#14

Probably not. I really have mixed emotions about GDPR being a SaaS founder. It seems overstepping and heavy handed that the EU can enact laws that affect American's and American companies. The EU can do what it wants, but generally I am against regulation as it promotes bureaucracy, stifles innovation, and creates fluff and burden's especially on small companies such Chief Data Protection Officer and Chief Data Offic…

It's not over stepping. Don't like the laws? Don't do business there. States in the US have different laws that affect operating businesses in them, too.

Re: Ask HN: Is HN GDPR compliant?

#16

Probably not. I really have mixed emotions about GDPR being a SaaS founder. It seems overstepping and heavy handed that the EU can enact laws that affect American's and American companies. The EU can do what it wants, but generally I am against regulation as it promotes bureaucracy, stifles innovation, and creates fluff and burden's especially on small companies such Chief Data Protection Officer and Chief Data Offic…

[deleted]

Re: Ask HN: Is HN GDPR compliant?

#17

Why would it need to be compliant? Ycombinator is not a European company.

But if they hold and manage data for users who reside in the EU (which they do), then I believe the rules apply too. From what I can gather, if a user in the EU approaches HN and asks for their profile data and posts to be removed, then that falls under the GDPR laws.

If that it truly the case, then I suspect we will see more and more sites refuse service to Europeans.

Are Europeans permitted to decline to be covered under the GDPR? (In exchange for being permitted to use such sites?)

Re: Ask HN: Is HN GDPR compliant?

#18

Why would it need to be compliant? Ycombinator is not a European company.

But if they hold and manage data for users who reside in the EU (which they do), then I believe the rules apply too. From what I can gather, if a user in the EU approaches HN and asks for their profile data and posts to be removed, then that falls under the GDPR laws.

No, laws don't work that way. American first amendment rights, for instance, don't extend to websites based in Europe.

You don't get to bring your laws and rights with you when you visit a website that's hosted and run in a foreign country.

edit: clarified European based websites

Re: Ask HN: Is HN GDPR compliant?

#19

Why would it need to be compliant? Ycombinator is not a European company.

But if they hold and manage data for users who reside in the EU (which they do), then I believe the rules apply too. From what I can gather, if a user in the EU approaches HN and asks for their profile data and posts to be removed, then that falls under the GDPR laws.

Is there any reason why HN would be bound by EU laws, if it's not a European organization? What other countries laws should it be bound by, other than the ones it operates in?

Re: Ask HN: Is HN GDPR compliant?

#20
American businesses should add a clause that all authorized access is predicated on a user knowingly acknowledging that they are not a resident of the EU. If GDPR becomes an issue they could abuse the CFAA to get the persons of interest extradited to the USA for prosecution of unauthorized access. It would be funny too because the data the lawyers would collect to proceed with a case would be from unauthorized access too and they could be extradited and prosecuted too and they would probably lose their jobs oh what fun lawyers bring upon themselves and those that endure their wrath.

Just floating a crazy alcohol induced idea here don't take it too seriously.

Post reply on HN