Hacker News new | past | comments | ask | show | jobs | submit login

GDPR literally prohibits you from requiring personal information in exchange for something that doesn’t require that personal information in order to function. You’re right it’s about choice and control over data and “you can only have this thing if you give us unrelated personal data” is not choice nor control.



It's not that simple. GDPR is purposely vague and regulated "in principle" rather than by the letter. Otherwise anyone operating a digital storefront, email newsletter or even subscription paywall would be in violation.

GDPR doesn't have much standing against gated content and many top law firms agree. There's also a combination of legitimate interest, business vs personal emails, and contract in effect to sign up for communications as workarounds. And to be extra clear, GDPR has no enforcement outside of the EU so it can't do anything against a US-based database company anyway.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: