"Is TMP built for GDPR?" Topic

So I'm seeing variations of this from a few of my usual sites

As much as we want to inspire you to uncover the wonders of the world, due to the General Data Protection Regulation in the European Union, we're unable to do so at this time. Rest assured that we're working hard to implement new practices so we can do so in the future. We appreciate your understanding!

Where is the "we have cookies" warning? 😆

We have a cookie. Be warned.

GDPR is old news, surely? Been around for four or five years…

Creepy!!

I believe that GDPR deals with a lot more than just cookies.

Is it a particular type of cookie like chocolate chip or any type of cookie?

Current:
- G.D.P.R. Germaine Democratic Plenary Republic
- D.P.A. Democratic Personnel Alliance
- I.C.O. Informers Commissar Officer

Fictional:
- M.O.T. Ministry of Truth

What personal data do you put into TMP?

Warning #2: If you prevent TMP from being able to read its cookie, then you will be condemned to having to log in every single time you come to TMP (if you want your settings back).

That's its only function. So TMP can recognize you.

That's its only function. So TMP can recognize you.

So not relevant to GDPR then.

TreeGirl made peanut butter cookies this past weekend. She is making chocolate chip the next.

So not relevant to GDPR then.

If you believe in the EU's ability to assert jurisdiction over people the way they say they can, then the cookie is relevant.

Not a fan of GDPR. The first step in protecting you from being tracked and keeping your data private is every website that targets EU members* has to record and track you, and provide that data to various government and non-government organizations without notifying you. In order to know that is going on in GFPR systems, all you have to do is read and understand the whole GDPR yourself.

* – factors such as the use of a language or a currency generally used in one or more Member States with the possibility of ordering goods and services in that other language, or the mentioning of customers or users who are in the Union, may make it apparent that the controller envisages offering goods or services to data subjects in the Union. gdpr-info.eu/recitals/no-23

So publishing on the Internet in English (an official language of Wales) means you are "targeting" nenbers of the EU.

But don't despair. Everything in the GDPR is so broad and covered by conditions, exemptions and exclusions (over 90% of the matierial is CE&E) that it could mean anything and often means nothing.

So publishing on the Internet in English

As an American traveling in Europe, with my English browser and iPhone, I really don't care; just show me the new LotR trailer. Amazon you dumb ass, you're the one who sent the email with the link!

My "region" is the United States.

My "region" is the United States.

No it isn't. If you are physically in Europe (something Amazon wouldn't know), your region whatever part of Europe you are in. This is basically the same fallacy as GDPR asserting jurisdiction because they want it to be that way.

So, if we remove you and your specific desires and reform the principle you are asserting, that sounds a little wonky. I'm an American, therefore I am governed by US standards. That doesn't cut it any more than I am an EU citizen, so no matter where I conduct business, it is governed by EU laws.

You would never (I hope) assert that being a citizen of one jurisdiction means you can ignore the laws of jurisdiction you are in with respect to driving, pornography, or taxes. Nor would any jurisdiction claim authority over your behaviour in someone else's jurisdiction. (With the possible exception of some places trying to tax you twice when you live and own a business in different jurisdictions.)

So why us this different? Because we treat technology, and very much so information technology, as if it were magic. I have an expected outcome when I mash the buttons in a certain order, so that is "reality" and what is actually going on is irrlevant.

I had a very interesting variant of that happen to me while I was working abroad. I was quartered on an Army base and working at an Embassy, both of which by assent of both nations were sovereign US soil. The problem was the technology that implemented certain media streaming IP protections wasn't programmed to acknowledge that distinction.

That's an actual failure of technology to properly implement law and regulation, as opposed to saying your citizenship somehow overrides local governance.

If you are physically in Europe

Not anymore thank heaven. Trailer link worked just fine.

If I really cared I should have installed a VPN

Wut?

What, wut?

Etotheipi Wales isn't in the EU

It was before Brexit, when the GDPR was written, and that's what counts in their minds (the "commonly used" clause has been interpreted in that exact way in cases).

While it's not as interesting a discussion as Wales, we can still go with Ireland and Malta. Also, every Latin American (and other) post in the Internet targets EU citizens for publishing is Spanish or Portuguese. Then French and German. Basically, being invaded and colonized by Europeans indicates that you are targeting EU citizens.