Is DCUM compliant with European GDPR data privacy?

[Anonymous]

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

NP. Wait -- do you think that a solely US-based internet site is bound by every law in the world, including from the EU, Russia, Fiji, Pakistan, Japan, literally everywhere? And that it is the responsibility of the site owner to research and follow every law all over the world?

Is that what you are claiming?

If he does business there (makes his site accessible and collects ad revenue derived as a result), then yes of course. Why do you think other US based business comply?

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

No, you have it wrong. The EU does not have the right to create a law that governs a US-based website that primarily serves US users. If the EU wants to protect its citizens from the dangers of DCUM, it can block the site and prevent EU citizens from reaching it. The EU has no authority over me or DCUM.

Now you’re sounding like a Republican, Jeff!

But in all seriousness, is that your personal, political view or your interpretation of the GDPR?

I think that is common sense. If North Korea passed a law requiring all websites to show a portrait of Kim Jong-un, would you be here arguing that I have to follow it? If I was in the EU, I would follow EU laws, not American laws. Since I am in the US, I follow US laws.

Good thing you’re not a lawyer, Jeff!

Check out Soriano v Forensic News and Others [2021] EWHC 56 (QB) and then report back.

Right. But Jeff is collecting that type of data within the EU, including tracking info, without the required consent or disclosures. I posted more info about it in another thread on website feedback that someone started on a separate data privacy issue, but he immediately deleted it (twice in fact).

Maybe get a hobby or read a book. Just go away. You’re annoying.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

No, you have it wrong. The EU does not have the right to create a law that governs a US-based website that primarily serves US users. If the EU wants to protect its citizens from the dangers of DCUM, it can block the site and prevent EU citizens from reaching it. The EU has no authority over me or DCUM.

Now you’re sounding like a Republican, Jeff!

But in all seriousness, is that your personal, political view or your interpretation of the GDPR?

I think that is common sense. If North Korea passed a law requiring all websites to show a portrait of Kim Jong-un, would you be here arguing that I have to follow it? If I was in the EU, I would follow EU laws, not American laws. Since I am in the US, I follow US laws.

Good thing you’re not a lawyer, Jeff!

Check out Soriano v Forensic News and Others [2021] EWHC 56 (QB) and then report back.

Right. But Jeff is collecting that type of data within the EU, including tracking info, without the required consent or disclosures. I posted more info about it in another thread on website feedback that someone started on a separate data privacy issue, but he immediately deleted it (twice in fact).

1) What type of data do you believe Jeff is tracking that is covered by GDPR?
2) Why do you care?
3) Why are you still posting here if it bothers you?

[Anonymous]

jsteele wrote:

Anonymous wrote:DP. If you have actually grounds to believe Jeff is wrong in his interpretation, then say that. Playing coy about it is just tedious, and suggests you know you’re wrong but don’t want to admit it.

The GDPR poster will argue until you are blue in the face. I've encountered her before. She is just entertaining herself.

You should just block her to do her a favor since you are apparently violating her hypothetical EU protections.

[jsteele]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

No, you have it wrong. The EU does not have the right to create a law that governs a US-based website that primarily serves US users. If the EU wants to protect its citizens from the dangers of DCUM, it can block the site and prevent EU citizens from reaching it. The EU has no authority over me or DCUM.

Now you’re sounding like a Republican, Jeff!

But in all seriousness, is that your personal, political view or your interpretation of the GDPR?

I think that is common sense. If North Korea passed a law requiring all websites to show a portrait of Kim Jong-un, would you be here arguing that I have to follow it? If I was in the EU, I would follow EU laws, not American laws. Since I am in the US, I follow US laws.

Good thing you’re not a lawyer, Jeff!

Check out Soriano v Forensic News and Others [2021] EWHC 56 (QB) and then report back.

Right. But Jeff is collecting that type of data within the EU, including tracking info, without the required consent or disclosures. I posted more info about it in another thread on website feedback that someone started on a separate data privacy issue, but he immediately deleted it (twice in fact).

No, I removed your posts because they were completely off-topic and inaccurate. This post is also wrong. I am not collecting PII. I have a disclosure that you have ignored. I'll post it here to make it easy for you:

Notice to European Union users

DC Urban Moms and Dads‘ operations are located in the United States. If you provide information to us, the information will be transferred out of the European Union (EU) to the United States. By providing personal information to us, you are consenting to its storage and use as described herein.

https://www.dcurbanmom.com/privacy

You are, in fact, providing consent by continuing to use this site. I urge you to protect your privacy by joining Brussels Urban Moms and Dads and leaving DCUM alone.

[Anonymous]

Here is the EU GDPR official guidance site, OP. It does not apply to Jeff:

https://gdpr.eu/companies-outside-of-europe/

It does not apply for other reasons, but it certainly does fall under this exception as well:

The second exception is for organizations with fewer than 250 employees.

In a little more detail, here is where it is intended to apply outside the EU:

When does the GDPR apply outside Europe?

As we just mentioned, there are two scenarios in which a non-EU organization might have to comply with the GDPR. Let’s take a closer look at each of these.

Offering goods or services

The Internet makes goods and services in far-flung places accessible anywhere in the world. A teenager in Cyprus could easily order a pizza online from a local pizza shop in Miami and have it delivered to a friend’s house there. But the GDPR does not apply to occasional instances. Rather, regulators look for other clues to determine whether the organization set out to offer goods and services to people in the EU. To do so, they’ll look for things like whether, for example, a Canadian company created ads in German or included pricing in euros on its website. In other words, if your company is not in the EU but you cater to EU customers, then you should strive to be GDPR compliant.

Monitoring their behavior

If your organization uses web tools that allow you to track cookies or the IP addresses of people who visit your website from EU countries, then you fall under the scope of the GDPR. Practically speaking, it’s unclear how strictly this provision will be interpreted or how brazenly it will be enforced. Suppose you run a golf course in Manitoba focused exclusively on your local area, but sometimes people in France stumble across your site. Would you find yourself in the crosshairs of European regulators? It’s not likely. But technically you could be held accountable for tracking these data.

1. DCUM does not offer goods. Maybe you could argue it offers a service, but it does not have a pattern of having "set out to offer goods and services to people in the EU." Probably not a good idea for Jeff to solicit ads in German or set up an Italian subforum, though. I'm sure he is disappointed.

2. DCUM doesn't track cookies, as Jeff noted. That seems to be what you are complaining about (not having the ability to accept them), but it works against your argument here.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

No, you have it wrong. The EU does not have the right to create a law that governs a US-based website that primarily serves US users. If the EU wants to protect its citizens from the dangers of DCUM, it can block the site and prevent EU citizens from reaching it. The EU has no authority over me or DCUM.

Now you’re sounding like a Republican, Jeff!

But in all seriousness, is that your personal, political view or your interpretation of the GDPR?

I think that is common sense. If North Korea passed a law requiring all websites to show a portrait of Kim Jong-un, would you be here arguing that I have to follow it? If I was in the EU, I would follow EU laws, not American laws. Since I am in the US, I follow US laws.

Good thing you’re not a lawyer, Jeff!

Check out Soriano v Forensic News and Others [2021] EWHC 56 (QB) and then report back.

Right. But Jeff is collecting that type of data within the EU, including tracking info, without the required consent or disclosures. I posted more info about it in another thread on website feedback that someone started on a separate data privacy issue, but he immediately deleted it (twice in fact).

1) What type of data do you believe Jeff is tracking that is covered by GDPR?
2) Why do you care?
3) Why are you still posting here if it bothers you?

Tracking cookies.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

NP. Wait -- do you think that a solely US-based internet site is bound by every law in the world, including from the EU, Russia, Fiji, Pakistan, Japan, literally everywhere? And that it is the responsibility of the site owner to research and follow every law all over the world?

Is that what you are claiming?

If he does business there (makes his site accessible and collects ad revenue derived as a result), then yes of course. Why do you think other US based business comply?

Nope. See my cite above and become more familiar with the guidelines, if you are so excited about discussing them.

[Anonymous]

jsteele wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

No, you have it wrong. The EU does not have the right to create a law that governs a US-based website that primarily serves US users. If the EU wants to protect its citizens from the dangers of DCUM, it can block the site and prevent EU citizens from reaching it. The EU has no authority over me or DCUM.

Now you’re sounding like a Republican, Jeff!

But in all seriousness, is that your personal, political view or your interpretation of the GDPR?

I think that is common sense. If North Korea passed a law requiring all websites to show a portrait of Kim Jong-un, would you be here arguing that I have to follow it? If I was in the EU, I would follow EU laws, not American laws. Since I am in the US, I follow US laws.

Good thing you’re not a lawyer, Jeff!

Check out Soriano v Forensic News and Others [2021] EWHC 56 (QB) and then report back.

Right. But Jeff is collecting that type of data within the EU, including tracking info, without the required consent or disclosures. I posted more info about it in another thread on website feedback that someone started on a separate data privacy issue, but he immediately deleted it (twice in fact).

No, I removed your posts because they were completely off-topic and inaccurate. This post is also wrong. I am not collecting PII. I have a disclosure that you have ignored. I'll post it here to make it easy for you:

Notice to European Union users

DC Urban Moms and Dads‘ operations are located in the United States. If you provide information to us, the information will be transferred out of the European Union (EU) to the United States. By providing personal information to us, you are consenting to its storage and use as described herein.

https://www.dcurbanmom.com/privacy

You are, in fact, providing consent by continuing to use this site. I urge you to protect your privacy by joining Brussels Urban Moms and Dads and leaving DCUM alone.

That’s not sufficient for GDPR purposes. Users have to actively consent or decline. You know that, you’re just choosing not to comply.

[Anonymous]

Sounds like a junior associate got assigned something on GDPR. GDPR, like many EU laws, are extra-territorial and should be ignored in this context. When the EU notifies Jeff he’s in trouble he can consider a remedy. Lol.

[Anonymous]

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:

jsteele wrote:

Anonymous wrote:Thanks for sharing this perspective, Jeff. I understand your logic, but the EU regulations actually do require that you give users the option to accept or decline, not that you make that election on their behalf.

I think that I have been pretty clear that I couldn't care less about EU regulations in this regard. As I said, if you feel I am endangering your privacy, feel free to boycott the site. I certainly wouldn't want you to violate any principles you hold on this matter.

Right, you have made that clear. And I am sure A LOT of US based businesses feel the exact same way. Why wouldn’t they? But that’s not how it works. You don’t get to pick and choose the laws you obey. See the article posted above.

No, you have it wrong. The EU does not have the right to create a law that governs a US-based website that primarily serves US users. If the EU wants to protect its citizens from the dangers of DCUM, it can block the site and prevent EU citizens from reaching it. The EU has no authority over me or DCUM.

Now you’re sounding like a Republican, Jeff!

But in all seriousness, is that your personal, political view or your interpretation of the GDPR?

I think that is common sense. If North Korea passed a law requiring all websites to show a portrait of Kim Jong-un, would you be here arguing that I have to follow it? If I was in the EU, I would follow EU laws, not American laws. Since I am in the US, I follow US laws.

Good thing you’re not a lawyer, Jeff!

Check out Soriano v Forensic News and Others [2021] EWHC 56 (QB) and then report back.

Right. But Jeff is collecting that type of data within the EU, including tracking info, without the required consent or disclosures. I posted more info about it in another thread on website feedback that someone started on a separate data privacy issue, but he immediately deleted it (twice in fact).

No, I removed your posts because they were completely off-topic and inaccurate. This post is also wrong. I am not collecting PII. I have a disclosure that you have ignored. I'll post it here to make it easy for you:

Notice to European Union users

DC Urban Moms and Dads‘ operations are located in the United States. If you provide information to us, the information will be transferred out of the European Union (EU) to the United States. By providing personal information to us, you are consenting to its storage and use as described herein.

https://www.dcurbanmom.com/privacy

You are, in fact, providing consent by continuing to use this site. I urge you to protect your privacy by joining Brussels Urban Moms and Dads and leaving DCUM alone.

That’s not sufficient for GDPR purposes. Users have to actively consent or decline. You know that, you’re just choosing not to comply.

I guess Jeff could just permanently block you so you aren’t in danger of…? What are you in danger of again? Oh, being tracked. But Jeff doesn’t track. Having goods or services provided? But Jeff doesn’t provide them? What is the danger again?

[Anonymous]

Anonymous wrote:Sounds like a junior associate got assigned something on GDPR. GDPR, like many EU laws, are extra-territorial and should be ignored in this context. When the EU notifies Jeff he’s in trouble he can consider a remedy. Lol.

OK sure, but he’s probably in breach of his advertiser agreements too. I can’t believe Google ads or any of the other big outfits wouldn’t address this. Wish I had a summer associate who could look into it!

[jsteele]

Anonymous wrote:

Anonymous wrote:Sounds like a junior associate got assigned something on GDPR. GDPR, like many EU laws, are extra-territorial and should be ignored in this context. When the EU notifies Jeff he’s in trouble he can consider a remedy. Lol.

OK sure, but he’s probably in breach of his advertiser agreements too. I can’t believe Google ads or any of the other big outfits wouldn’t address this. Wish I had a summer associate who could look into it!

I already told you, Google and other ad networks treat the lack of a consent as non-consent. As far as Google is concerned, all DCUM users have clicked "don't accept cookies".

Maybe in the future the ad networks will demand that I request consent. Not because of the EU, but because of California (whose laws I am also not complying with). If so, I'll cross that bridge when I come to it.

[Anonymous]

jsteele wrote:

Anonymous wrote:

Anonymous wrote:Sounds like a junior associate got assigned something on GDPR. GDPR, like many EU laws, are extra-territorial and should be ignored in this context. When the EU notifies Jeff he’s in trouble he can consider a remedy. Lol.

OK sure, but he’s probably in breach of his advertiser agreements too. I can’t believe Google ads or any of the other big outfits wouldn’t address this. Wish I had a summer associate who could look into it!

I already told you, Google and other ad networks treat the lack of a consent as non-consent. As far as Google is concerned, all DCUM users have clicked "don't accept cookies".

Maybe in the future the ad networks will demand that I request consent. Not because of the EU, but because of California (whose laws I am also not complying with). If so, I'll cross that bridge when I come to it.

OP here. Fair enough, and I think we’ve debated this one to death. Honestly, I’m not trying to give you a hard time, but the other thread got me thinking … and especially when you deleted my response.

These actually are very interesting (and quickly evolving) issues worldwide, especially when coupled with the vaccine passports and other tracking apps that are becoming so ubiquitous worldwide. Personally, I think it’s hard to reconcile GDPR with the QR codes we are now forced to scan everywhere in Europe (although of course the EU says they’re GDPR compliant!).

I think we are going to see a lot more in this area in the years to come. But unfortunately many find these regulations and topics too mundane or uninteresting to give much thought.

[Anonymous]

NP. The GDPR is not mundane or uninteresting. It's huge and has caused headaches and issues for companies all over the US. Any company with a website that sells products has had to make changes, in some form or another.

Because DCUM does not sell products worldwide or track users/cookies, it is unaffected by GDPR. Not everything is. Some sites do not ship to the EU. Other sites, such as this one, are not vending sites. And this particular site doesn't track users or cookies.