Live data from Hacker News

GDPR for lazy people: Block all European users with Cloudflare Workers

apility.io

261–270 of 1001 posts

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#261
post #247

Any recommendations or resources for what micro internet sites should do? I'm thinking in scale from website with my picture and some software projects on it, to micro free webservice like uptime checker, to $1 seating chart maker. Block EU is totally reasonable for all these. Is it necessary?

[deleted]

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#262
post #247

Any recommendations or resources for what micro internet sites should do? I'm thinking in scale from website with my picture and some software projects on it, to micro free webservice like uptime checker, to $1 seating chart maker. Block EU is totally reasonable for all these. Is it necessary?

No, it shouldn't be necessary.

Because: do you need personal informations from users? If yes: why?

Payment & Accounting => allowed ("legitimate use") Technical Monitoring => allowed ("legitimate use")

And if some user want to cancel its account: is it a problem (if he doesn't owe you anuthing)??? No? Well... then you'll have no problem

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#263

Earlier quoted context omitted.

> Is the EU going to target American banks of American businesses and try to extract fines? You mean like America? That time when the USA decided to enforce their embargo against Cuba by intercepting a payment from one of the Nordics for a bunch of Cuban cigars? No, that's unlikely. > Is the EU going to extradite owners of these businesses? Extremely unlikely, besides that would require the cooperation of the other c…

> You mean like America? Ahh yes, one of my favorite logical fallacies: https://en.wikipedia.org/wiki/Tu_quoque

It's not being used as a fallacy, since it's not part of an argument that proves a point.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#264

To offer a non-dev perspective on Hn, it feels like tech companies are really trying to annoy us users with GDPR updates in an effort to nurture opposition to similar proposed regulations in the future. I hope it doesn't work. I love GDPR, getting rid of the WHOIS database stuff alone is enough to make me a huge fan. The option to delete my data is also amazing.

Isn't this pretty much what happened with the cookie law? It states that cookies necessary for the functioning of sites were ok, but everyone ended up putting up those warnings anyways and it greatly diluted any benefit of the rule and it ended up like Prop 65: warnings everywhere, even when they weren't useful. Overall, it just led to the law being ridiculed.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#265

To offer a non-dev perspective on Hn, it feels like tech companies are really trying to annoy us users with GDPR updates in an effort to nurture opposition to similar proposed regulations in the future. I hope it doesn't work. I love GDPR, getting rid of the WHOIS database stuff alone is enough to make me a huge fan. The option to delete my data is also amazing.

>To offer a non-dev perspective on Hn, it feels like tech companies are really trying to annoy us users with GDPR updates in an effort to nurture opposition to similar proposed regulations in the future. I hope it doesn't work. You think businesses are that forward thinking? You think there is some grand conspiracy to annoy users so that they hate regulation?

>You think there is some grand conspiracy to annoy users so that they hate regulation?

Yeah? U.S. companies do this all the time. They did it with the cookie warnings and tried to act like they didn't know they were creating an absolutely terrible experience.

Companies acting in bad faith against regulations is basically the default.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#266

Keep in mind, just blocking traffic out of the EU does not serve as GDPR compliance. EU citizens are covered by GDPR, not EU traffic. A EU citizen traveling to the US is still afforded all the protections of GDPR as they do back at home.

The way things are going, we'll start whole services shutting down completely, just to avoid trying to handle people's data responsibly.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#267
post #219

Earlier quoted context omitted.

You better hope you fly under the radar then.

Why? Bad press often makes for great business. Not parent commenter btw, just my two cents

Because when the EU catches on, they will have funds in the EU (including customer or advertiser payments) seized, they will probably not be able to travel to the EU without fear of arrest, etc.

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#268
post #214

Earlier quoted context omitted.

Why? You're opposed to privacy? And how do you plan to react when you get penalized?

I do care about privacy - I don't use Analytics on my website, don't show any ads, don't send marketing emails and don't sell customer data to anyone. However, I will not comply with that bureaucratic law, because the EU will not be able to enforce it in my country and I have much more important things to do to stay competitive on the market (I have a lot of competitors).

That's an important aspect. May I ask which country is that?

I'm curious about your product too if you are comfortable enought to disclose it :)

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#269
post #113

I simply don't understand how or why a law that has scope in the EU is causing trouble for companies which conduct no business in the EU beyond responding to HTTP requests on a global decentralized telecommunications network. Why would an American internet business which conducts no operations in Europe and has no servers in Europe be subject to regulation that affects the EU? What is going to happen? Is the EU going…

I'm wondering this too actually, I run a small business, we collect only the bare minimum of information from our customers but we do have some European customers. I'm ignoring GDPR completely, is there any downside for me? Will they block customers from using my service? Will they sieze my European cloud servers? Or can I safely do nothing as I currently am because I don't reside or have a registered business in Europe?

Re: GDPR for lazy people: Block all European users with Cloudflare Workers

#270
post #192

Earlier quoted context omitted.

As a developer I can understand this point of view, but as a consumer I say it's time to grow up. Internet startups have taken a "move fast and break things" approach that is analogous to early industrial revolution approaches to worker safety, product efficacy and safety, and environmental protection. You're working in the real world, with real consequences if you end up exposing people's personal data. The party is…

I feel that you're ignoring the situation of small startups with just a few founders. At this stage, it can really kill your business to spend a lot of your resources on making sure you're complying with GDPR. Usually the 'consumer' of those startups are OK to take some risk, heck a lot might even sign up with dummy emails. The Poland proposal [1] to limit GDPR compliance to only large businesses was trying to addres…

>I feel that you're ignoring the situation of small startups with just a few founders

It's that the equivalent of starting a new car company and arguing that you shouldn't be required to follow the same safety standard as Volkswagen Group, because you're still a small company?

At it's core the GDPR is simply stating that you're accountable for the data you collect and that you're only allowed to use the data for the purpose is originally collect. Building privacy into your product is much easier for someone designing something from scratch, compared to retrofitting it into the business plans of Facebook and Google.

I get the feeling that most of the people arguing against the GDPR are people who are focused solely in collecting user data as a core business. The people I know who are building actual product, where people pay for a service, are doing fine. Even though that they have to build products in a manner I suggested five years ago, where user data is either not collected or delete when processing is completed.

Post reply on HN