GDPR for lazy people: Block all European users with Cloudflare Workers

Post by Tomte » Fri, May 25, 2018, 8:51 PM UTC

manigandham wrote: post #257

toweringgoat wrote: post #243

Earlier quoted context omitted.

What you have described is _exactly_ how regulation works. It's still a hundred times better than what most countries in the world produce, since it's designed around the average human and not a megaco.

This isn't about how it works, it's about whether it works or not. That companies need to follow the law isn't exactly confusing, and nobody is saying they shouldn't, but when the law cant even clearly answer basic questions of who it applies to and when, that's a problem. There are examples of regulation that does work, but GDPR is not really in that category.

Post by s2g » Fri, May 25, 2018, 8:51 PM UTC

downandout wrote: post #211

johannes1234321 wrote: post #194

Earlier quoted context omitted.

A point with many sites is that they use ad networks and those ad networks send localized ads to Europeans, thus the site targets (or "envisages") Europeans. Even if the actual content is about quite local things.

In my personal opinion, that would be both a stretch of this recital and an abusive use of the GDPR. You don’t control what ads are shown to anyone because they are served by a third party, and you have a good faith belief that you are not subject to GDPR under Recital 23. My guess is that if you used an ad network that specialized in EU ads, you’d be subject to it. But using code from a US ad network that may have s…

Post by [deleted] » Fri, May 25, 2018, 8:52 PM UTC

logronoide wrote: post #21

I'm the author of the post. My most stupid post is in HN! crazy! I just wanted to be sarcastic and make some laughs about people blocking all traffic from Europe, which is crazy! It's a Friday afternoon blog post to show how cool my product is with Cloudflare Workers and having fun at the same time!

Post by Normal_gaussian » Fri, May 25, 2018, 8:52 PM UTC

matte_black wrote: post #77

orf wrote: post #50

Earlier quoted context omitted.

Is it onerous because you are doing dodgy things with EU citizens data, because you don't take information security seriously or because you've fallen for some of the FUD around GDPR (having to hire a DPO, being fined 2 trillion dollars, etc etc)? If it's too hard for you to copy paste a GDPR compliant privacy policy and monitor a GDPR email address then well, maybe you're in the wrong job.

We do take security seriously and we're not doing anything dodgy. We have business reasons for collecting user data, and users have no real reason to tell us to delete it at will, other than the fact that it makes them feel "creeped out". The future is probably going to be super creepy. If you want to participate, get over it.

Post by kerng » Fri, May 25, 2018, 8:53 PM UTC

Matticus_Rex wrote: post #216

mrweasel wrote: post #193

Earlier quoted context omitted.

>because its based on principles rather than hard rules They tried hard rules, rather than principles with the cookie laws and the companies around the world turned a good idea into a shit-show of popups while continuing to behave like nothing happened. Honestly the more I read and the more I see how different business react I start to view the GDPR as EU finally showing that will not accept businesses viewing it as…

95% of my GDPR work has done nothing for actual privacy. If this is how the EU "represents the best interest of 500 million people," then no thank you.