(Not so) Stupid Question 302: If a service is not hosted in the EU, does the GDPR still apply if the service offers services to EU subjects?

GDPR, General Data Protection Regulation, is just around the corner. In May next year, this regulation comes into effect and the implications are big. But how big? What if a service is hosted outside of the EU? Does the GDPR still apply? If you process data from EU subjects, or provide services or goods to EU subjects- then yes. GDPR applies.

The company has the burden of proof (in regards to consent regarding everything from marketing emails to use of personal data), and implicit consent is a thing of the past. (…Silence, pre-ticked boxes or inactivity should not therefore constitute consent…).

Oh boy. Things are changing, and we have some challenges ahead as developers. This is the first of many questions I had/have in regards to the GDPR- so expect more videos and blog posts.
If you have questions, or answers, please share :)

(Not so) Stupid Question 302: If a service is not hosted in the EU, does the GDPR still apply if the service offers services to EU subjects?

Comments