[3dfan]

The problem with the GDPR is that it is a monster of a legalese text:

https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELE...

Which nobody understands.

Which, depending on how you read it, might make participating on the internet practically impossible. An IP is considered personal data, so in theory you cannot use foreign infrastructure like a CDN.

Which certainly makes the internet as we know it impossoble. An internet where everybody builds tools on their site that everybody else can embed on their site. Because that would mean IPs flowing around between sites.

Which gives a huge disadvantage to Euroeans. Because Europreans have to show cookie banners and stuff to everybody around the world. While the rest of the world has to only show them to Europeans. Look at your favorite website through a proxy inside/outside the EU. It starts with an annoying popup only in the EU.

Which cements the stronghold of Google and Co, who 1) only have to bug their European users and 2) have the legal resources to cope with this insanity. Startups and indiemakers don't. So there will be even less of them in the EU. And the ones who exist will have to waste their time on this instead of building their products.

[hardware2win]

>An IP is considered personal data,

Is or can?

[Tarq0n]

This is way off base. Using PI to fulfill a request someone has made of you is the happy path of GDPR, you just can't retain or reuse that information more than you have

1) a contract or

2) permission or

3) a lawful task

For.

Having other parties process PI for you is fine as long as it's done under an agreement that binds them to the same terms.

[3dfan]

First, no, you cannot reduce a thousands of words long legal document to a few words like you did and say "Easy, this is how it works". Those thousands of words are there for a reason.

Second, good luck, figuring out what you have "a contract, permission or a lawful task" for under the specific circumstances of your site.

Third, good luck, making and understanding an "agreement that binds them" with every provider of every piece of infrastrcuture you use. Good luck doing that for even a single piece of infrastructure.