Funnily enough, the GDPR applies not just to foreign companies processing the data of people in the EU, but also to companies in the EU processing anyone's data :-D
GDPR is about data, not companies. It applies to all entities regardless of where they are established as long as they're doing business in the EU or processing data of EU citizens.
GDPR applies to (i) people in the EU regardless of where the the company is or (ii) companies in the EU irrespective if the data comes from someone outside the EU
The GDPR applies to all companies, social network platforms or not. It's not even about the internet in particular, it's about how companies can store and process private information of EU citizens.
It’s my understanding that GDPR protects the personal data of EU citizens. Regardless of whether you do business in the EU, if you process this data GDPR applies to you.
My guess is that this company has no way to verify that they don’t process EU citizen data. They almost certainly do if they’re scraping so pervasively. And I don’t think they can credibly claim users gave consent let alone all the other rules they need to follow.
Looking forward to someone challenging them on this and hopefully the EU taking action. This feels like exactly what GDPR should protect against.
reply