Any recommendations or resources for what micro internet sites should do? I'm thinking in scale from website with my picture and some software projects on it, to micro free webservice like uptime checker, to $1 seating chart maker. Block EU is totally reasonable for all these. Is it necessary?
GDPR for lazy people: Block all European users with Cloudflare Workers
261–270 of 1001 posts
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#262Any recommendations or resources for what micro internet sites should do? I'm thinking in scale from website with my picture and some software projects on it, to micro free webservice like uptime checker, to $1 seating chart maker. Block EU is totally reasonable for all these. Is it necessary?
Because: do you need personal informations from users? If yes: why?
Payment & Accounting => allowed ("legitimate use") Technical Monitoring => allowed ("legitimate use")
And if some user want to cancel its account: is it a problem (if he doesn't owe you anuthing)??? No? Well... then you'll have no problem
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#263Earlier quoted context omitted.
> Is the EU going to target American banks of American businesses and try to extract fines? You mean like America? That time when the USA decided to enforce their embargo against Cuba by intercepting a payment from one of the Nordics for a bunch of Cuban cigars? No, that's unlikely. > Is the EU going to extradite owners of these businesses? Extremely unlikely, besides that would require the cooperation of the other c…
> You mean like America? Ahh yes, one of my favorite logical fallacies: https://en.wikipedia.org/wiki/Tu_quoque
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#264To offer a non-dev perspective on Hn, it feels like tech companies are really trying to annoy us users with GDPR updates in an effort to nurture opposition to similar proposed regulations in the future. I hope it doesn't work. I love GDPR, getting rid of the WHOIS database stuff alone is enough to make me a huge fan. The option to delete my data is also amazing.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#265To offer a non-dev perspective on Hn, it feels like tech companies are really trying to annoy us users with GDPR updates in an effort to nurture opposition to similar proposed regulations in the future. I hope it doesn't work. I love GDPR, getting rid of the WHOIS database stuff alone is enough to make me a huge fan. The option to delete my data is also amazing.
>To offer a non-dev perspective on Hn, it feels like tech companies are really trying to annoy us users with GDPR updates in an effort to nurture opposition to similar proposed regulations in the future. I hope it doesn't work. You think businesses are that forward thinking? You think there is some grand conspiracy to annoy users so that they hate regulation?
Yeah? U.S. companies do this all the time. They did it with the cookie warnings and tried to act like they didn't know they were creating an absolutely terrible experience.
Companies acting in bad faith against regulations is basically the default.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#266Keep in mind, just blocking traffic out of the EU does not serve as GDPR compliance. EU citizens are covered by GDPR, not EU traffic. A EU citizen traveling to the US is still afforded all the protections of GDPR as they do back at home.
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#267Earlier quoted context omitted.
You better hope you fly under the radar then.
Why? Bad press often makes for great business. Not parent commenter btw, just my two cents
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#268Earlier quoted context omitted.
Why? You're opposed to privacy? And how do you plan to react when you get penalized?
I do care about privacy - I don't use Analytics on my website, don't show any ads, don't send marketing emails and don't sell customer data to anyone. However, I will not comply with that bureaucratic law, because the EU will not be able to enforce it in my country and I have much more important things to do to stay competitive on the market (I have a lot of competitors).
I'm curious about your product too if you are comfortable enought to disclose it :)
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#269I simply don't understand how or why a law that has scope in the EU is causing trouble for companies which conduct no business in the EU beyond responding to HTTP requests on a global decentralized telecommunications network. Why would an American internet business which conducts no operations in Europe and has no servers in Europe be subject to regulation that affects the EU? What is going to happen? Is the EU going…
Re: GDPR for lazy people: Block all European users with Cloudflare Workers
#270Earlier quoted context omitted.
As a developer I can understand this point of view, but as a consumer I say it's time to grow up. Internet startups have taken a "move fast and break things" approach that is analogous to early industrial revolution approaches to worker safety, product efficacy and safety, and environmental protection. You're working in the real world, with real consequences if you end up exposing people's personal data. The party is…
I feel that you're ignoring the situation of small startups with just a few founders. At this stage, it can really kill your business to spend a lot of your resources on making sure you're complying with GDPR. Usually the 'consumer' of those startups are OK to take some risk, heck a lot might even sign up with dummy emails. The Poland proposal [1] to limit GDPR compliance to only large businesses was trying to addres…
It's that the equivalent of starting a new car company and arguing that you shouldn't be required to follow the same safety standard as Volkswagen Group, because you're still a small company?
At it's core the GDPR is simply stating that you're accountable for the data you collect and that you're only allowed to use the data for the purpose is originally collect. Building privacy into your product is much easier for someone designing something from scratch, compared to retrofitting it into the business plans of Facebook and Google.
I get the feeling that most of the people arguing against the GDPR are people who are focused solely in collecting user data as a core business. The people I know who are building actual product, where people pay for a service, are doing fine. Even though that they have to build products in a manner I suggested five years ago, where user data is either not collected or delete when processing is completed.