Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This sounds like absolute bullshit.


Yes it is bollocks, but the fact that Monal wouldn't need a DPO if they were based in the EU is true.

https://ico.org.uk/for-organisations/guide-to-the-general-da...

Recording IP addresses in a web server log does not qualify as "regular and systematic monitoring of data subjects on a large scale" by any stretch of any definition.

And that's besides the fact that they don't have any presence in the EU. GDPR's scope only includes companies with at least some presence in the EU. That's not just because it'd be unenforceable - the laws make no attempt to include a wider scope than that.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: