Hacker News new | past | comments | ask | show | jobs | submit login

That's the UK's interpretation of GDPR. What about France or Poland, or any of the other countries?

I suppose it depends where in Europe he would like to visit




I'm not seeing any interpretation being done here, but judge for yourself. Here is what the GDPR actually says (Art. 37 Designation of the data protection officer):

> (1) The controller and the processor shall designate a data protection officer in any case where:

> a) the processing is carried out by a public authority or body, except for courts acting in their judicial capacity;

> b) the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and/or their purposes, require regular and systematic monitoring of data subjects on a large scale; or

> c) the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 or personal data relating to criminal convictions and offences referred to in Article 10.


That's the UK's straight-forward unequivocal explanation of the rules. Where there is room for interpretation or uncertainty, the ICO is very good at pointing this out. It doesn't here.

As poisan42 points out - it echoes the words in the actual article, directly.

Bottom line, he doesn't need a DPO.


There's no "UK Interpretation", this is the whole point of the EU. The rules apply across the block.


EU law doesn't work like that. Each country has to pass their own local law to enforce the GDPR. For the UK that was the Data Protection Bill 2017.


From wikipedia:

The GDPR replaces the 1995 Data Protection Directive.[4] Because the GDPR is a regulation, not a directive, it does not require national governments to pass any enabling legislation and is directly binding and applicable.[5]

So, no local laws. It's a regulation.


Only for the sake of correctness/completeness: GDPR does allow member states to adjust certain details to bring them in line with local regulations (see Chapter 9). These are explicit opening clauses though that must not basically weaken or augment GDPR.


It's more complex than that. Different countries might pass different laws about interpretation, and both are valid until there's an ECJ decision.


It's an EU Regulation, which under EU law the local courts have a duty to enforce. Local courts and laws will be dealing with all the details unless a case is appealed to ECJ.

To say that local courts and laws will have no influence is complete rubbish.


I'm not sure why people are downvoting this so hard: https://webcache.googleusercontent.com/search?q=cache:eMV5_l...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: