<html><head><style id="axi-htmleditor-style" type="text/css">p { margin: 0px; }</style></head><body dir="" style="font-size: 10pt; font-family: "Source Sans Pro", sans-serif; background-image: none; background-repeat: repeat; background-attachment: fixed;">A good summary Sabri.<div><br></div><div>One of the points that has not been addressed (fully) is the fact that the mailing went out to 'role accounts' which are normally company accounts (if some used a personal email address for that, than this will have suddenly become a business email address), so GDPR applicability would be remote, if at all.<br><div class="x-axi-signature"><br></div><div class="x-axi-signature">Alex (LL.M)<br><div class="x-axi-signature" style="; font-size: 10pt; font-family: " source="" sans="" pro",="" sans-serif;"="">-- <div>IDGARA | Alex de Joode | alex@idgara.nl | +31651108221 | Skype:adejoode</div></div></div><br>On Tue, 12-05-2020 21h 12min, Sabri Berisha <sabri@cluecentral.net> wrote:<br><blockquote style="margin-left: 10px; padding-left: 10px; border-left: 1px solid #ccc;"><div style="null; null;"><div style="font-family: tahoma, new york, times, serif; font-size: 10pt; color: #000000"><div></div><div><span id="zwchr" data="data" marker="__DIVIDER__">----- On May 12, 2020, at 4:51 AM, Töma Gavrichenkov <ximaera@gmail.com> wrote:<br></span></div><div><span data="data" marker="__DIVIDER__"><br data="data" mce="mce" bogus="1"></span></div><div><span data="data" marker="__DIVIDER__">Peace,</span></div><div data="data" marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data="data" mce="mce"> Peace,<br> <br> On Tue, May 12, 2020 at 1:29 PM Arash Naderpour<br> <arash.naderpour@gmail.com> wrote:<br><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data="data" mce="mce"> EU laws are for EU</blockquote><br> Perhaps sadly for some, but this is not how it works. EU laws protect<br> EU citizens wherever they are, or the EU citizens' personal and<br> sensitive data wherever it is accessed, processed, or stored.<br></blockquote><br>Perhaps sadly for some, but this is not how it works.<br></div><div data="data" marker="__QUOTED_TEXT__"><br></div><div data="data" marker="__QUOTED_TEXT__">First of all, there is the requirement for the non-EU company to <em><strong>intentionally</strong></em> provide goods or services to the EU. That can be found in article 3(2)a. </div><div data="data" marker="__QUOTED_TEXT__"><br data="data" mce="mce" bogus="1"></div><div data="data" marker="__QUOTED_TEXT__">This means that, per EU rules, the GDPR will not apply to the mom&pop ice cream shop in San Francisco that takes online orders from a EU citizen that happens to be visiting the U.S. The GDPR only affects companies (in or outside the EU) that market to EU citizens or territories.</div><div data="data" marker="__QUOTED_TEXT__"><br data="data" mce="mce" bogus="1"></div><div data="data" marker="__QUOTED_TEXT__">Second, and most important, for a law to protect it must be enforceable. For a law to be enforceable, a court must be able to issue a judgement, and that judgement must be executable.</div><div data="data" marker="__QUOTED_TEXT__"><br>EU judgements based on the GDPR are not necessarily enforceable outside the EU, at least not in the U.S. Treaties must be in place, and a good example is the Hague Convention on Foreign Judgments in Civil and Commercial Matters.</div><div data="data" marker="__QUOTED_TEXT__"><br data="data" mce="mce" bogus="1"></div><div data="data" marker="__QUOTED_TEXT__">In the U.S., foreign judgements are enforceable if they comply with the Uniform Foreign Money Judgments Recognition Act. This law specifies that a judgement may not be recognized if the foreign court did not have "personal jurisdiction" on the U.S. entity. If that entity <span style="color: #000000; font-family: tahoma, 'new york', times, serif; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;" data="data" mce="mce">does not have a physical presence in the EU, establishing the foreign court’s personal jurisdiction will be very difficult if not impossible.</span><div style="clear: both;" data="data" mce="mce"><br></div>But, for folks that did not go to law school, here is a simpler explanation: <a href="https://www.youtube.com/watch?v=CD2FlW79PfU" data="data" mce="mce" data-saferedirecturl="redir.hsp?url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DCD2FlW79PfU" target="_blank">https://www.youtube.com/watch?v=CD2FlW79PfU</a> :-)</div><div data="data" marker="__QUOTED_TEXT__"><br data="data" mce="mce" bogus="1"></div><div data="data" marker="__QUOTED_TEXT__">Thanks,<br><br>Sabri<br></div></div></div></blockquote></div></body></html>