this post was submitted on 08 Jan 2024
1033 points (99.3% liked)
Technology
60116 readers
4247 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I'd be happy to keep the ones that say:
"we notice you are in europe and we can't use our cookies to track you so you can't come to our website"
It's good to know sites with policies like that to ensure I never visit them.
"It is literally impossible for us not to spy on you or sell your data. Sorry not sorry bye."
Typically, those already have geo filters because they can't be bothered to implement EU requirements.
Unless you're outside of the EU, of course, in which case you'll probably be tracked no matter what.
One example I know if is my hometown newspaper, dentonrc.com; I have a friend who moved to Europe and was annoyed that they geo-blocked him, but I can't really blame them. How many people are really gonna visit the site for a small American newspaper from the EU? From a business perspective it makes no sense for them to pay a developer to do more than the bare minimum.
I know, I certainly don't blame the little sites.
Geoblocking in such cases would not be sufficient. For one thing your geo-IP database will never be perfectly accurate, even without considering that "data subjects who are in the Union" can connect to your site via proxies or VPNs with non-EU IP addresses. For another you still need to respond to GDPR requests e.g. to remove data collected on a data subject currently residing in the EU, even if the data was collected while they were outside the EU, and you can't do that if you're blocking their access to the site. For a newspaper in particular the same would apply to any EU data subject they happened to report on, whether they had previously visited the site or not.
What exactly is the EU gonna do about a foreign site that does no business in the EU? They don't rule the world.
Sure, they don't rule the world. They only have the power to ban you (either the company per se or its individual owners, officers, and/or employees) from ever again doing any business in the EU. Which naturally includes business with any individuals or companies either based in the EU (as a seller or a buyer) or wanting to do business in the EU. Or from traveling to the EU, whether for business or personal reasons. Little things like that. Nothing too inconvenient. (/s)
They haven't taken things quite that far—yet. But they could. It's dangerous to assume that you can ignore them without consequences just because your company doesn't currently depend on revenue from EU customers. The world is more interconnected than that, and the consequences may not be limited to your company.
So is a local newspaper supposed to be afraid of not complying aggressively enough with foreign laws from the whole world, or just the EU? The way I see it they're already doing more than is reasonably required by making a good faith effort to prevent people in the EU from accessing their site. Holding them responsible for people who deliberately bypass the blocking seems downright imperialist to me.