Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR: US news sites unavailable to EU users over data protection rules

bbc.com

Post reply on HN
Print view View original

561–570 of 680 posts

Re: GDPR: US news sites unavailable to EU users over data protection rules

#561

Post by Spivak »

amarkov wrote: post #504
hk__2 wrote: post #471

Earlier quoted context omitted.

> Which specific EU country would have jurisdiction over an interaction which took place in the US? OP’s country. The "place" that interaction took place in is irrelevant here, unless the company "doesn’t specifically target its services at individuals in the EU"; OP is citizen of an EU country so the GDPR rules apply. (edit: rephrasing)

That's not how jurisdiction normally works. A French citizen working within the US for a US company can't demand that they follow French employment regulations.

France could absolutely pass such a law, companies would either have to comply or stop doing business in France.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#562

Post by ggg9990 »

slavik81 wrote: post #546
fixermark wrote: post #449

Earlier quoted context omitted.

Of course, that vision of what the internet could be never really answered the question of where the money was coming from to pay for the servers that are delivering that content.

USA Today originally distributed their advertisements on paper without any user tracking. I don't see why advertising without tracking is so unthinkable today.

People paid money for USA Today, and people looked at more advertisements in print papers.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#563

Post by Angostura »

jimmaswell wrote: post #470
krisdol wrote: post #353

Earlier quoted context omitted.

They can also be quite smart. What was your referrer, what's your user flow through the site, what do similar users do when arriving from the same pages and searches? What time of day is it for the visitor? ie: figure out why they are doing what they're doing and direct them to ads that capture that intent.

I'm not certain but much of that sounds like the kind of information GDPR doesn't let you use like that.

The only reason that IP address logging is a problem is that ISPs could theoretically cross reference with subscribers leases and identify them.

I think this much vaguer stuff will be fine.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#564

Post by ggg9990 »

class4behavior wrote: post #532
sireat wrote: post #102

Earlier quoted context omitted.

That looks fantastic, I would actually read USA Today if this lean site sticks around. If they want to monetize, publishers should control their own generic ad inventory (like they used to in old pre internet days) and ask for opt-in if you want customization. Easy on paper but hard in reality.

Apparently, WashPo prefers a more coercive method: https://www.washingtonpost.com/gdpr-consent/ Either pay or sell yourself. A gamble they might lose if people just stop sharing and click Washpo articles, but a possible route if others follow suit. Meanwhile, NPR goes more hardcore than even USA Today: https://text.npr.org I wonder, does that mean EU users are just a nuisance costing traffic, or that all graphics are…

> Either pay or sell yourself.

What is your preferred third option for content that costs money to make?

Re: GDPR: US news sites unavailable to EU users over data protection rules

#565

Post by Angostura »

rdlecler1 wrote: post #177
kartan wrote: post #140

Business don't comply with regulations because it is easy, but because it's needed to do business. If a service didn't had a big user base in Europe, most countries don't speak English, it may be cheaper to remove the service. The New York Times or The New Yorker that even have physical copies available in Europe work as usual. I work in a gambling company and this is our day to day business. To enter a new market me…

Regulations tend to favor incumbents, decreasing competition, and thereby increase monopoly and creating central hubs of systemic risk. There is no free lunch with one-size-fits-all rule making. Unfortunately regulators think there is.

> Regulations tend to favor incumbents, decreasing competition,

Whio is more likely to be hurt by GDPR. Google, or DuckDuckGo?

Re: GDPR: US news sites unavailable to EU users over data protection rules

#566

Post by pishpash »

fixermark wrote: post #191
alkonaut wrote: post #155

Earlier quoted context omitted.

Hopefully what will happen is that it will be more expensive to advertise and publishers will earn more on dumber ads Obviously if ads are less targeted then they may be less effective so advertisers will make less on ads that cost more. This will hurt their bottom line, which in turn will make the products we buy more expensive. But that's exactly the end goal. I want to pay for things (information, products) with m…

That's a sad outcome. I remember the tedium of non-targeted advertising---it's what ultimately pushed me away from most traditional print and broadcast media and online. Targeted advertising occasionally brings me information I actually want; non-targeted advertising feels like such a waste of everybody's time. I hope someone takes on the experiment of opt-in GDPR compliant ads.

Targeted advertisement can be done if the user is entirely in control of the data and the consent process. No one would be against that. This is a technical problem that can be solved, there was just no incentive to do it. Now perhaps there is.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#567

Post by ascorbic »

jimmaswell wrote: post #498
openIce wrote: post #487

Earlier quoted context omitted.

This is the most retarded comment I have read today. Literally everything you say is false

Are you disputing that GDPR disallows you from retaining visitor IPs, especially without explicit consent?

Yes. It's fine to retain IP addresses for a reasonable amount of time if you have a good reason to keep them, such as security. Just rotate them as usual, and don't keep them longer than you need.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#568

Post by IshKebab »

fixermark wrote: post #449
maushu wrote: post #320

Earlier quoted context omitted.

I was surprised when my adblocker didn't bleep once. This is like looking what the internet could be. It could've been great.

Of course, that vision of what the internet could be never really answered the question of where the money was coming from to pay for the servers that are delivering that content.

Servers are pretty cheap these days, and always getting cheaper. It's the staff salaries that are the real cost.

I think Patreon has the only good answer so far. There are multiple people on there that make top quality content and earn good money from it.

It's probably not an answer for every industry.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#569

Post by Spivak »

jimmaswell wrote: post #505
malka wrote: post #502

Earlier quoted context omitted.

Your point is that apache default config is horrendous regarding log keeping policy ? I agree.

Nobody would have said this a year ago. How are people getting so swept up in this privacy zeitgeist that they think web admins keeping logs is horrendous?

At my company doing this would be in complete violation of our data retention policy (not GPDR related). Where are companies running production services without handling logging of sensitive information? Regulation or not that kind of data is a huge liability for our legal department.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#570

Post by IshKebab »

throwaway974 wrote: post #456
bo1024 wrote: post #352

Earlier quoted context omitted.

If the 1-3 person startup's application is geared around personal information and it needs a complex privacy policy to describe what it does with data, then yes, it will have to work very hard to comply with GDPR, but that will also result in meaningful improvements in privacy and data control for its customers. Do you have examples of startups where data is not a core business concern, who still find it very onerous…

Here's an example: I have a profitable, bootstrapped SaaS business based in US . It's not based on ads or selling data. I don't even have a freemium plan. Only a limited free trial after which you have to start paying. It's a trivial application that stores mostly already public data. Only email is required to login so that I can send password reset and other such communication. I've been talking to a very well known…

It's not really a criticism of the GDPR that some companies are irrationally panicked about it.
Post reply on HN