Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google plans to move UK users' accounts outside EU jurisdiction

reuters.com

Post reply on HN
Print view View original

21–30 of 85 posts

Re: Google plans to move UK users' accounts outside EU jurisdiction

#21

Post by shadowgovt »

Symbiote wrote: post #19
rwmj wrote: post #7

It is real. I just got an email about this from Google about my gmail account: - Your service provider and data controller is now Google LLC: Because the UK is leaving the EU, we’ve updated our Terms so that a United States-based company, Google LLC, is now your service provider instead of Google Ireland Limited. Google LLC will also become the data controller responsible for your information and complying with appli…

It seems very early to be making changes like this. Google must really benefit somehow from the change, otherwise they could leave it until much later in the year, and see what (if any) changes Parliament makes to privacy and data protection law in the UK.

GDPR compliance is expensive; every account not in the regime saves Google costs.

Re: Google plans to move UK users' accounts outside EU jurisdiction

#22

Post by PeterisP »

s_dev wrote: post #10
supergarfield wrote: post #6

Earlier quoted context omitted.

> British law also N.Irish people to declare themselves Irish under the GFA This by itself doesn't mean anything for GDPR—GDPR applies to EU residents (whether or not they are EU citizens), not EU citizens. Declaring yourself Irish doesn't make you fall under GDPR protection if you live outside the EU.

GDPR applies to EU citizens globally. It's just not enforced globally. The company will have to be large enough to have a presense (or future presense) in the EU for there to be an tangible impact. >Declaring yourself Irish doesn't make you fall under GDPR protection if you live outside the EU. I'm a DPO and this is absolutely incorrect.

There's a big difference whether the company is in EU or not.

If your company is in EU, then according to Article 3.1 the GDPR applies to all your procesing of personal data, period - with no exceptions depending on citizenship. So if you're a DPO in a EU company, then that's what's true for you, you definitely have to apply GDPR protections to EU citizens (and also noncitizens) wherever they are.

If your company is not in EU, then according to Article 3.2. the GDPR applies only to people located in the EU - "This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union"; no qualification on citizenship, but a qualification based on location.

Re: Google plans to move UK users' accounts outside EU jurisdiction

#23

Post by briandear »

s_dev wrote: post #10
supergarfield wrote: post #6

Earlier quoted context omitted.

> British law also N.Irish people to declare themselves Irish under the GFA This by itself doesn't mean anything for GDPR—GDPR applies to EU residents (whether or not they are EU citizens), not EU citizens. Declaring yourself Irish doesn't make you fall under GDPR protection if you live outside the EU.

GDPR applies to EU citizens globally. It's just not enforced globally. The company will have to be large enough to have a presense (or future presense) in the EU for there to be an tangible impact. >Declaring yourself Irish doesn't make you fall under GDPR protection if you live outside the EU. I'm a DPO and this is absolutely incorrect.

> GDPR applies to EU citizens globally. It's just not enforced globally.

Do American speed limits apply to American drivers in Europe? Or do the European speed limits apply?

Essentially you are absolutely incorrect. The EU has no legal jurisdiction outside of EU borders.

Re: Google plans to move UK users' accounts outside EU jurisdiction

#24

Post by zweep »

shadowgovt wrote: post #21
Symbiote wrote: post #19

Earlier quoted context omitted.

It seems very early to be making changes like this. Google must really benefit somehow from the change, otherwise they could leave it until much later in the year, and see what (if any) changes Parliament makes to privacy and data protection law in the UK.

GDPR compliance is expensive; every account not in the regime saves Google costs.

I can tell you that two FAANGs implement GDPR compliance for everyone because they didn’t want to risk getting a user’s EU status wrong.

Re: Google plans to move UK users' accounts outside EU jurisdiction

#25

Post by playpause »

zweep wrote: post #24
shadowgovt wrote: post #21

Earlier quoted context omitted.

GDPR compliance is expensive; every account not in the regime saves Google costs.

I can tell you that two FAANGs implement GDPR compliance for everyone because they didn’t want to risk getting a user’s EU status wrong.

Which two, and do you have a source?

Re: Google plans to move UK users' accounts outside EU jurisdiction

#26

Post by heavenlyblue »

zweep wrote: post #24
shadowgovt wrote: post #21

Earlier quoted context omitted.

GDPR compliance is expensive; every account not in the regime saves Google costs.

I can tell you that two FAANGs implement GDPR compliance for everyone because they didn’t want to risk getting a user’s EU status wrong.

Also probably having two different codebases to handle data compliance is probably not too easy to support.

Re: Google plans to move UK users' accounts outside EU jurisdiction

#28

Post by throwaway237654 »

pmlnr wrote: post #11

I don't completely understand what gives them the right to do so - legislation are still in place, GDPR & the rest are included.

The UK is planning to leave the EU, so Google is planning to treat UK accounts as not part of the EU. I don't see what is difficult to understand about this.

Re: Google plans to move UK users' accounts outside EU jurisdiction

#29

Post by s_dev »

_-___________-_ wrote: post #15
s_dev wrote: post #10

Earlier quoted context omitted.

GDPR applies to EU citizens globally. It's just not enforced globally. The company will have to be large enough to have a presense (or future presense) in the EU for there to be an tangible impact. >Declaring yourself Irish doesn't make you fall under GDPR protection if you live outside the EU. I'm a DPO and this is absolutely incorrect.

Can you provide a source? All information I'm able to find says that it applies to EU & EEA residents, with no mention of citizenship being relevant. Edited to add: https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_gui... (it's not even residency that is key - just being present in the EU+EEA)

Here is the official source -- you aren't exactly providing many sources yourself beyond repeating what you've "seen":

https://ec.europa.eu/info/law/law-topic/data-protection/refo...

Post reply on HN