undefined | Better HN

0 pointszelphirkalt1y ago0 comments

GDPR, EU. You cannot simply load third party shit on your website, without asking for consent. By downloading an SVG from a third party provider, I would need to ask the visitor, whether transmitting their IP address is OK or not, since that is personal data. Aside form all the information associated with when someone accesses the site.

0 comments

eertami1y ago

> You cannot simply load third party shit on your website, without asking for consent

That's not how the GDPR works at all. If it were, there would be no content distribution networks operating in the EU. Linking to a third party image in document markup does not involve you transmitting anything.

JimDabell1y ago

By including external references to third-parties, you’re effectively leaking your visitors’ IP addresses to the third-party. Those IP addresses are considered PII and are covered by the GDPR.

https://www.theregister.com/2022/01/31/website_fine_google_f...

simonjgreen1y ago

Gotcha, thanks

j / k navigate · click thread line to collapse