Ask HN: GDPR in 2022 – What do I need to know as a solo founder?

It looks like things have been getting worst on the GDPR front, for what I can tell. I am getting messages from users telling me that that can’t use my service because things like Google Fonts and Google Analytics have been essentially made illegal in certain European countries like France, Austria and Germany, due to recent court rulings. A user told me they know of people who got fined because of this. Is this true? I can only find a few references here and there, but there seems to be truth to it. My main question is, what did you do in your case to make your product GDPR compliant? Any links to services that you used would be very helpful. Here is what I did so far for compliance. I generated the legal documents like terms and conditions, privacy policy etc. using a third-party document generation service, and I added a PDF with a GDPR Data Process Agreement (DPA) listing the platforms that I use (Firebase, etc). I’ve set the region of my production databases to Europe. To give more context if needed, I own a bootstrapped company and I’m now setting up the legal paperwork for being compliant with GDPR, the company is Belgium-based. The company is an online course platform, that allows customers to create their own website, in their own custom domain. So the customers could have in their websites privacy policies that are different than mine. What did you do in terms of documentation and third-party services to help you make your company GDPR compliant? Any services that you recommend? Thank you for any insight on this matter.
Story Published at: October 13, 2022 at 03:44PM