Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Nitpick, but as far as I understand it, it's only EU residents (regardless of their citizenship). The specific text says "data subjects who are in the Union", and citizen never appears in it.

(This is for foreign businesses. EU businesses have to apply it to everyone, regardless of their location or citizenship.)




This means this should be applied to everyone because how do you check that someone is an EU resident? Should websites display a page requesting visitor to upload their residency certificate to be complaint?


No, it means they have to apply to people connecting from the EU.


Have you any document from a data protection authority or lawyer that makes this claim? or even close to it?


He's not a lawyer, but as a "GDPR implementation leader" I bet he talked to some:

https://www.linkedin.com/pulse/gdpr-does-apply-eu-citizens-g...

But really, it's plain from the text.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: