Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR: US news sites unavailable to EU users over data protection rules

bbc.com

Post reply on HN
Print view View original

601–610 of 680 posts

Re: GDPR: US news sites unavailable to EU users over data protection rules

#601

Post by mrtksn »

CodeWriter23 wrote: post #592
mrtksn wrote: post #270

Earlier quoted context omitted.

Well, as it turns out, it's your problem. Like, literally :) Anyway, don't be too upset about all this. The law is not banning you from collecting my data, you just need to be explicit and informative about it so that I can decide if I am going to send a request to your servers. I'm often disturbed by the mindset that people are some business' god given a right to exploitation. It's the other way around really, that…

Not when a US site uses a "copy protection" mechanism to ban all EU users, and grants a copyright license giving full access to US users and no access to EU users. Then your EU-based choice to use a proxy becomes a copy protection circumvention under the ECD, and the user is subject to a lawsuit.

Better Call Saul!

Re: GDPR: US news sites unavailable to EU users over data protection rules

#602

Post by RugnirViking »

PuffinBlue wrote: post #356
JeanMarcS wrote: post #103

Earlier quoted context omitted.

You can still have ads under GDPR. You can even continue to track people, you just have to ask consent and not doing it behind user’s back.

And as I understand it you can't punitively restrict access to the service for not consenting to that tracking.

And then you can still have ads, just not track them.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#603

Post by tomc1985 »

ggg9990 wrote: post #564
class4behavior wrote: post #532

Earlier quoted context omitted.

Apparently, WashPo prefers a more coercive method: https://www.washingtonpost.com/gdpr-consent/ Either pay or sell yourself. A gamble they might lose if people just stop sharing and click Washpo articles, but a possible route if others follow suit. Meanwhile, NPR goes more hardcore than even USA Today: https://text.npr.org I wonder, does that mean EU users are just a nuisance costing traffic, or that all graphics are…

> Either pay or sell yourself. What is your preferred third option for content that costs money to make?

There are a ton of great business models for financing content that do not require smart ads or the kind of tracking we see today. They are not as exciting but ... tough cookies.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#604

Post by Avamander »

amarkov wrote: post #571
Spivak wrote: post #561

Earlier quoted context omitted.

France could absolutely pass such a law, companies would either have to comply or stop doing business in France.

Of course! But hiring a US resident who happens to also be a French citizen doesn't count as doing business in France.

Pretty sure the EU and US have deals that allow legal actions against companies in other's jurisdiction.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#605

Post by oaiey »

fixermark wrote: post #447
oaiey wrote: post #332

Earlier quoted context omitted.

If my car crashes or I am extorted due to my sexuality or killed for my religion. All the same. It is deadly. Data Privacy is not a nebulous concept. It is a human right. It is for that reason in the German constitution.

If you have to keep your religion secret to avoid being killed, you have MUCH bigger problems in your society that I don't think "nobody knowing who is secretly Jewish" is actually going to fix. It's not like a future hypothetical fascist dictatorship isn't going to have access to the necessary records to piece it together or would follow its own GDPR constraints, nor would the GDPR stop it from arbitrarily deciding…

I think it is generally based against discrimination and not focused on something extreme as a state organized Holocaust. Also GDPR does not care about this. For the GDPR these are just attributes which should be protected.

A core rule of data privacy is to restrict yourself to the necessary information you need. Religion like sexual orientation is rarely justifiable why it is collected at all.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#606

Post by azernik »

methodover wrote: post #588
azernik wrote: post #557

Earlier quoted context omitted.

https://gdpr-info.eu/recitals/no-43/ "Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance" This is one of the co…

Recital 43 is a fair objection -- I should rephrase what I said in light of it. I should have said: > "The GDPR requires many things, but there's nothing in there that says you can't reject the customer if they don't opt-in to the things you need them to opt-in to in order to provide the service. " The last sentence of recital 43 says that consent can only be given to those personal data processing operations that ar…

Your business model's success is not "providing the service".

EDIT: Quoth the British agency responsible for implementation: "The processing must be necessary to deliver your side of the contract with this particular person. If the processing is only necessary to maintain your business model more generally, this lawful basis will not apply and you should consider another lawful basis, such as legitimate interests."

https://ico.org.uk/for-organisations/guide-to-the-general-da...

Re: GDPR: US news sites unavailable to EU users over data protection rules

#607

Post by RugnirViking »

bmelton wrote: post #555
globuous wrote: post #458

Earlier quoted context omitted.

What ? Is this legitimate or are you being funny ? I'm European and have never washed an egg before cooking it in my life. what is this ? I crack it open and cook it and am still here. I do wash my tomatoes when I make a salad with raw tomatoes though. And that's mostly to get stuff off since I'd argue my vinegrette would kill all the bacteria. And washing your potato ? I'm so confused. Don't we all cook potatoes in…

The incidence rate for salmonella is pretty low either way, but you should definitely wash eggs before cracking them open, for the same reasons you wash your tomatoes. As for potatoes, no, we don't all cook them by boiling them in water -- many of us bake them, fry them, or use them for making hash browns. This might just be cultural, but I would actually be more inclined to wash them before boiling them, since the r…

Nope. In fact when I was in cookery school here in the EU, I was told that it is perfectly safe to eat raw egg here, but that in the US this is never advisable.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#608

Post by cortesoft »

majewsky wrote: post #494
oaiey wrote: post #365

Earlier quoted context omitted.

"Business" means website visit from a US/EU citizen travelling Europe. And even blocking them by IP and logging it is a violation. User can file a complaint against you, resulting in a ruling. Whether you ever see an "invoice" or see police officers is another topic. But you violate the regulation/law in another country.

Blocking by IP is okay, logging it is the only violation. And why on earth would you have to log those blocks?

You would want to log it to make sure you aren't accidentally blocking the wrong people.

Re: GDPR: US news sites unavailable to EU users over data protection rules

#609

Post by Shivetya »

bitmapbrother wrote: post #589
flohofwoe wrote: post #48

Alternatively there's this: https://eu.usatoday.com/ No ads, no tracking, no cookies, not even Javascript. Just plain HTML+CSS and JPEG images. The whole front page is around 650 KByte, and by far most of this is in the image files. As a result the page looks very clean and loads very fast. This is what all news web sites should look like, not just for EU readers (although I fear that this is just a temporary solutio…

>No ads, no tracking, no cookies, not even Javascript. Just plain HTML+CSS and JPEG images. Are we viewing the same page? Not only do I see JavaScript in the EU page, but I also see this in the code: "trackingServer":"gannett.hb.omtrdc.net"},"market":"gpapermobileapp","trackingServer":"repdata.usatoday.com","trackingServerSecure":"srepdata.usatoday.com"},"ads"

it certainly does not like it if you attempt to visit with ublock or some other combination of what I run, all *.usatoday sites only come as

found an invalid character in header value

for me

Re: GDPR: US news sites unavailable to EU users over data protection rules

#610

Post by derrikcurran »

craigsmansion wrote: post #551
class4behavior wrote: post #532

Earlier quoted context omitted.

Apparently, WashPo prefers a more coercive method: https://www.washingtonpost.com/gdpr-consent/ Either pay or sell yourself. A gamble they might lose if people just stop sharing and click Washpo articles, but a possible route if others follow suit. Meanwhile, NPR goes more hardcore than even USA Today: https://text.npr.org I wonder, does that mean EU users are just a nuisance costing traffic, or that all graphics are…

What it means for me personally is that The Washinton Post as well as the NPR can't be relied upon for reporting news, since they are apparently unable to even marginally interpret a legal document aiming for clarity and instead channel their incompetence into snarky behaviour that still isn't compliant with the GDPR. To wit (washpo): "You consent to the use of cookies and tracking by us and third parties to provide…

What's NPR doing wrong? Are they redirecting to the text-only version for EU IPs or something?
Post reply on HN