There are exceptions for some purposes, and I won't be surprised if governments try to stretch those as far as they can, but in general GDPR applies to governments as well.
They will tell you, that they are not subject to EU Law.
If you ask an EU equivalent they will just tell you that they don't have any data. Or that they might have but can't disclose it because of security concerns.
Actually if its data held on a EU national they are required to divulge it or be in breach of this. They don't get to dodge it just because they are in the USA, the law applies to any organisation storing data about an EU national.
Actually if its data held on a EU national they are required to divulge it or be in breach of this.
You people can keep on saying that this law pertains to any entity/organization that has any info on any EU citizen, but we know this is untrue. The rest of the world knows that the EU doesn't have this authority, so I don't why you people keep on parroting this line.
Let's get something else straight. We know there's political motives behind this law that are orthogonal to "we care about privacy", and other governments know this as well, and will respond to the EU in kind if need be.
This. If you don't have a location in the EU the court can't send you any orders to comply with. This is how Facebook doged German privacy law. The only reason why Facebook had to answer a EU court was their settlement in Ireland wich they had for taxation reasons.
The EU want to implement something like a virtual settlement for Businesses to extend their reach. Arguing that if you make profit in the EU than you have a settlement there. But as long as your country isn't willing to help the EU getting you there is nothing to fear.
At least I don't see what they could do. Ban your product... yes... But more than that?
