Your personal blog? I think GDPR usually is applicable only for businesses. For example you don't need to adhere to GDPR when saving new contact on your phone. Maybe personal website might fall into such category as well.
Ask HN: What do I need to do to make my blog GDPR compliant?
11–17 of 17 posts
Re: Ask HN: What do I need to do to make my blog GDPR compliant?
#12Not a lawyer.
If you do not need GA why use it? It is a separate connection your visitors browser needs to open and it is a connection to a third party. If you want analytics, there are some privacy options, for example Umami. See also here: https://github.com/0xnr/awesome-analytics
You could also disable the Nginx logs from logging IP addresses and then you should be fine.
Maybe adding a simple site saying that you do not retain any IPs or other information, you can prevent these emails in the future.
Edit: Nice looking website.
Re: Ask HN: What do I need to do to make my blog GDPR compliant?
#13Unless you have a real audience in Europe, just block European traffic.
Re: Ask HN: What do I need to do to make my blog GDPR compliant?
#14Earlier quoted context omitted.
That link says “ Any business in the world that collects personal information from people in the EU (even if it's just an IP address) will be required to comply with the following General Data Protection Regulation (GDPR) Privacy Policy stipulations” but I am not a business. So can I assume it doesn’t apply to me?
An IP address is not personal information in itself. It is sensitive information, though, so it should be processed in a secure way as a matter of best practice.
It is PII under German and Dutch law.
Re: Ask HN: What do I need to do to make my blog GDPR compliant?
#15You mean this one? Seems to be spam/trolling/whatever. My name is #REDACTED#, and I am a resident of Roanoke, Virginia. I have a few questions about your process for responding to General Data Protection Regulation (GDPR) data access requests: Would you process a GDPR data access request from me even though I am not a resident of the European Union? Do you process GDPR data access requests via email, a website, or te…
That's the one! Good to know it's spam. I removed GA and added a privacy page. Thanks!
Re: Ask HN: What do I need to do to make my blog GDPR compliant?
#16You mean this one? Seems to be spam/trolling/whatever. My name is #REDACTED#, and I am a resident of Roanoke, Virginia. I have a few questions about your process for responding to General Data Protection Regulation (GDPR) data access requests: Would you process a GDPR data access request from me even though I am not a resident of the European Union? Do you process GDPR data access requests via email, a website, or te…
That's the one! Good to know it's spam. I removed GA and added a privacy page. Thanks!
There is no reason to reply to such email in any case. Clearly nothing good can come of it.
Use GA if you want to.
Re: Ask HN: What do I need to do to make my blog GDPR compliant?
#17[deleted]