No B2C tech company can avoid doing business involving EU member state or UK cit... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		nihonde on May 25, 2019 \| parent \| context \| favorite \| on: GDPR After One Year No B2C tech company can avoid doing business involving EU member state or UK citizens. You have to assume you’re in-scope unless you have zero contacts with Europe.

undergrowth54 on May 25, 2019 [–]

I thought it was EU/UK residents, rather than citizens. Even if all of your users are US citizens, some US citizens reside in Europe.

nihonde on May 25, 2019 | [–]

Neither residence nor citizenship are tests for GDPR’s territorial application.

It applies to any data collected in the Union: https://gdpr-info.eu/art-3-gdpr/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact