undefined | Better HN

0 pointsrhexs6y ago0 comments

I’ve always wondered, how do they know if you’re in the EU? Can I change my address to somewhere in the EU and get my data deleted or will they check?

0 comments

4 comments · 1 top-level

eanzenberg6y ago· 3 in thread

Maybe where the data originated? So, if you are a EU citizen, but use a google device in the US on vacation, is the data generated in US bound by US-only regulations, so no GDRP?

metal136y ago

It's...complicated: https://www.dataprotectionreport.com/2018/12/edpb-clarifies-...

"The Guidelines note that the processing of personal data of EU citizens that takes place outside the EU will not trigger the GDPR so long as the processing is not a specific offer directed at individuals in the EU or to monitor their behavior in the EU."

So it may be safe for google...but given it would apply to a user profile in general, including EU, maybe not?

0xbadcafebee6y ago

Send a GDPR request anyway. Many companies do not track what region their users live in, or what parts of it came from what regions, etc. They get a GDPR request and they just file it in the queue for processing. All they know initially is your name and e-mail when you send in the request.

Normal_gaussian6y ago

When you are geographically in the EU the GDPR rights apply to all your data.

The location of the data does not matter.

The origin of the data does not matter.

Citizenship does not matter.

These are the reasons many US firms tried to call GDPR overreaching. However if it didn't apply in this way there would be too much wiggle room to be effective.

j / k navigate · click thread line to collapse