[notananthem]

"it applies to any entity (any person, business, or organization) that collects or processes personal data from any person in the European Union"

It should

[bhhaskin]

Except HN doesn't collect or process personal data.

[cloudking]

Pretty sure email addresses and user generated content (comments) are personal data.

[generalizations]

HN is a US website. The EU doesn’t have jurisdiction in the US. I’m pretty sure it’s that simple.

[eddsh1994]

You're wrong.

https://www.cookiebot.com/en/gdpr-usa/#:~:text=Does%20the%20....

[daveevad]

One weird GDPR implication our team considered during initial implementation of our solution was US citizens traveling to Europe, and even people visiting embassies of EU countries in the US, would seemingly trigger all applicable constraints of the legislation.

Personally, I still view GDPR more akin to regulatory capture than actual consumer protections; although, I do admit, more than anything, the Internet needs more consumer protection.