@wblau @blaine I discuss much of this on the github link that @ian mentioned, but truthfully, there are many unknowns.

Instance owners are clearly #controllers in the classical sense, and if they're doing things with #EU #datasubjects' information (in many cases) they will be governed by the #GDPR.

Issues around #transfers #enforceability #controller obligations #subprocessors ... all of that still needs better clarity from regulators.