Live data from Hacker News

GDPR for lazy people: Block all European users with Cloudflare Workers

apility.io

81–90 of 1001 posts

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#81
post #24

Earlier quoted context omitted.

You misunderstand the GDPR if you think you carry its protection around when you visit non-European locales.

That is not true I am afraid.

Just because a piece of paper in a European bureaucrat's filing cabinet says one thing doesn't make it reality

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#82

Earlier quoted context omitted.

It's no laughing matter for some companies. EU citizens have turned into pests overnight. There are businesses who don't make much money from the EU to justify compliance with the regulations.

> EU citizens have turned into pests overnight. That's an excellent attitude to take towards your users.

I hate to break it to you but not all users are treated the same.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#83
post #53

I keep seeing these posts on how to block European users to avoid the GDPR. As a citizen of Europe, seeing these posts consistently making it to the front page is disappointing. It would seem that Silicon Valley perceives the GDPR as more of a hindrance than an opportunity to offer users better privacy. Nothing has been learned.

I can see why you'd be disappointed - if popular websites started blocking US customers I'd be pretty bummed out as well (even if it was easy to circumvent). As a dev though, I also understand the frustration. Creating startups is already time-intensive and stressful. A lot of us are on shoestring budgets. Most startups will fail. To a solo developer in the US, the idea of spending time understanding and complying wi…

If a company does not understand GDPR it's fair to say I don't want them handling my personal data. And it's not like this is new, there was a 2 year period to prepare for this.

"Most startups will fail": I do not see that happening. You will first receive a warning. The EU won't really care if you are a tiny startup. Unless you are running a shady business, there's not much to worry about.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#84

Earlier quoted context omitted.

It's no laughing matter for some companies. EU citizens have turned into pests overnight. There are businesses who don't make much money from the EU to justify compliance with the regulations.

> EU citizens have turned into pests overnight. More than USA citizens with dubious DMCA takedown requests?

We've never had a DMCA takedown.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#85
post #50

Earlier quoted context omitted.

Is it onerous because you are doing dodgy things with EU citizens data, because you don't take information security seriously or because you've fallen for some of the FUD around GDPR (having to hire a DPO, being fined 2 trillion dollars, etc etc)? If it's too hard for you to copy paste a GDPR compliant privacy policy and monitor a GDPR email address then well, maybe you're in the wrong job.

We do take security seriously and we're not doing anything dodgy. We have business reasons for collecting user data, and users have no real reason to tell us to delete it at will, other than the fact that it makes them feel "creeped out". The future is probably going to be super creepy. If you want to participate, get over it.

-We're not doing anything dodgy.

-Other than the fact that it makes them feel "creeped out".

Pick one.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#86
post #34

Earlier quoted context omitted.

GDPR applies to all EU citizens. It doesn't matter if the citizen is accessing the web site from the eu or another country. Blocking people in the EU doesn't block all eu citizens from accessing your product/service.

People keep saying this but its not true. The EU has no jurisdiction outside of the EU. If both the user and site are outside of the EU at the time of the transaction, they can not make claims, regardless of citizenship.

The EU has jurisdiction over EU citizens, even those outside of the EU (see US citizens and taxes). But I question how the EU would have jurisdiction on anyone who is outside of the EU and does all their business outside of the EU, even with EU citizens. The EU can prohibit EU citizens from visiting websites that violate the law if they want. They can also block EU residents from visiting those sites.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#87

Earlier quoted context omitted.

>> EU citizens have turned into pests overnight. Are they really pests for demanding privacy? In today's environment?

You are a pest when you use a service and give nothing back in return, stealing resources that are better allocated to users that actually contribute to revenue.

I don't understand... isn't that something that the company decides? How are users stealing something?

For the longest time companies have been able to market something as 'free' when they have been the ones who have been trying to hide the fact that users' data was being sold, etc. So I would argue that if someone is 'stealing', it is actually the companies themselves.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#88
post #50

Earlier quoted context omitted.

Is it onerous because you are doing dodgy things with EU citizens data, because you don't take information security seriously or because you've fallen for some of the FUD around GDPR (having to hire a DPO, being fined 2 trillion dollars, etc etc)? If it's too hard for you to copy paste a GDPR compliant privacy policy and monitor a GDPR email address then well, maybe you're in the wrong job.

We do take security seriously and we're not doing anything dodgy. We have business reasons for collecting user data, and users have no real reason to tell us to delete it at will, other than the fact that it makes them feel "creeped out". The future is probably going to be super creepy. If you want to participate, get over it.

And this is literally what GDPR was created for. Hoping you've blocked access to the EU so I don't happen across it :)

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#89

Earlier quoted context omitted.

I can see why you'd be disappointed - if popular websites started blocking US customers I'd be pretty bummed out as well (even if it was easy to circumvent). As a dev though, I also understand the frustration. Creating startups is already time-intensive and stressful. A lot of us are on shoestring budgets. Most startups will fail. To a solo developer in the US, the idea of spending time understanding and complying wi…

If a company does not understand GDPR it's fair to say I don't want them handling my personal data. And it's not like this is new, there was a 2 year period to prepare for this. "Most startups will fail": I do not see that happening. You will first receive a warning. The EU won't really care if you are a tiny startup. Unless you are running a shady business, there's not much to worry about.

Not wanting to use non-GDPR compliant services is completely fair. I think it should be the user's choice.

I think assuming the EU won't care about tiny startups is irrelevant - I want to follow the letter of the law, it's why I'd opt to block EU users instead of just ignoring the existence of the law.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#90
post #50

Earlier quoted context omitted.

Is it onerous because you are doing dodgy things with EU citizens data, because you don't take information security seriously or because you've fallen for some of the FUD around GDPR (having to hire a DPO, being fined 2 trillion dollars, etc etc)? If it's too hard for you to copy paste a GDPR compliant privacy policy and monitor a GDPR email address then well, maybe you're in the wrong job.

We do take security seriously and we're not doing anything dodgy. We have business reasons for collecting user data, and users have no real reason to tell us to delete it at will, other than the fact that it makes them feel "creeped out". The future is probably going to be super creepy. If you want to participate, get over it.

So lets unpick this. You think you're not doing anything dodgy with your users personal information. However you feel that their information is your information and users have absolutely 'no real reason to tell us to delete it' (apart from, you know, it being their information). Then you top it off by taking a screeching right turn and saying 'future is going to be creepy ... get over it'.

Riiiight. You sound like the perfect person to be handing my personal information and I would trust you to take full care of it.

Not.

Post reply on HN