Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Huh? You're still a personal data processor.


For a start: Section 18 directly indemnifies the GP because they’re not a commercial entity.

Section 49 gives, additionally, specific carve outs for logging even if they were a commercial entity.

Consent is needed to pass logging data to third parties or to process it beyond end user functionality.

Its easier to just read the regulation: https://eur-lex.europa.eu/eli/reg/2016/679/oj




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: