[alfyboy]

"Norwegian internet users were tracked by Disqus because the company did not know that Norway introduced the common European privacy regulation GDPR in 2018. It thus took 511 days before Norwegians were incorporated into the company's "privacy mode" for GDPR countries and previously collected information was deleted."[0]

It seems that there was some setting that is enabled by default in all other countries than countries with the GDPR law.

Also, from an earlier article: "The company also claims that they have not shared Norwegians' online visits with anyone other than the parent company Zeta Global. Zeta Global describes itself as a 'data-driven marketing company"' that has information on over two billion identities."[1]

As a Norwegian, it will be interesting following this case.

[0]: https://nrkbeta.no/2021/05/05/datatilsynet-varsler-bot-pa-25...

[1]: https://nrkbeta.no/2020/09/04/datatilsynet-mener-det-er-sann...

[underyx]

Wouldn't it be funny if this was caused by some YAML configuration reading the country code "no" as "false".

[KingOfCoders]

Yes, loved that HN story.

[nerdponx]

This is great. Companies should fear GDPR and should consider disabling data collection by default. Mission accomplished.