violating-gdpr
Security and privacy
gdpr compliance checker
SHOW HN2022
How HN took it
3 positive, 8 neutral or asking, 0 mixed, 15 critical, out of 26 comments about the project. Thread score -0.38.
Privacy: 1 for, 5 againstExecution: 0 for, 5 againstIdea: 0 for, 4 againstPerformance: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful, pretty sweet tool.
From 2 comments
Pretty sweet tool!
jpdpeters on HNCool. Thanks for making this.
Advent_Poetry9 on HN
Objections
Tool is superficial; only parses the DOM and misses requests and cookies.
From 3 comments
Hm, this seems to work incorrectly. The login website of https://www.personio.de/login/ after you specify a company to login for does load Google Fonts and those do not show up…
zelphirkalt on HNAs a GDPR auditor, this website just does a very superficial job, and doesn't go anywhere close to deep enough. It could at least check if third-party cookies are being set…
kuba-orlik on HNYes, it does a very superficial job. But to check for third-party cookies and if they are being set without consent is very difficult to normalize and check for. For now, this is…
hauken on HN
Flags any non-EU server, so many normal sites are marked as violating.
From 3 comments
I don't store cookies, don't even have JS on my site. But it violates the GDPR just because it's hosted in New York?
smlavine on HNIt told me my site is probably violating GDPR. It's a static blog and doesn't collect any information or use any cookies, but it's hosted in the US. There would be ip addresses…
sleepydog on HNThe solution doesn’t differentiate between first-party or third-party servers. As long as any servers are outside Europe, it marks the site as in violation.
hauken on HN
GDPR does not apply to US-based sites with no EU business.
From 2 comments
I don't mean to be confrontational, but as an American with websites in the US- why would I care? The most basic tenet of sovereignty is that a country's laws stop at their…
hash872 on HNI would love to see this fought in court for my local neighborhood restaurant. No way would a US court hold that GDPR has any standing.
MR4D on HN
Requests
Link directly to the test result for a specific site.
From 1 comment
It would be very useful if you could link directly to the test of a specific site, so you could send that link directly to people.
teddyh on HN
Check third-party cookies set without consent.
From 1 comment
As a GDPR auditor, this website just does a very superficial job, and doesn't go anywhere close to deep enough. It could at least check if third-party cookies are being set…
kuba-orlik on HN
Questions
Does GDPR distinguish first-party from third-party servers?
From 1 comment
Hmm. My site itself is hosted in the US, so it catches my site as one of the violations. Does GDPR differentiate between first-party and third-party servers in this case?
vollmond on HN