Head of European Data Protection Board, responsible for GDPR application, criticizes US sites limiting access from EU, says there was plenty of time to prepare
LONDON — American news outlets including The Chicago Tribune, The Los Angeles Times and The Arizona Daily Star abruptly blocked access …
Context & Ripple Effects
When GDPR took effect on May 25, US publishers including The Los Angeles Times and The Chicago Tribune chose the bluntest compliance route available: rather than adapt their sites, they abruptly cut off EU readers entirely. The EDPB chair's rebuke — that outlets had two years of lead time and still opted for blackout — is the regulator's first public response to that choice, and it signals Brussels will not treat geo-blocking as an acceptable reading of the law.
The criticism lands against a backdrop the later coverage makes clear: two months in, [[a:932239|more than 1,000 US news sites and about a third of the 100 largest US newspapers remained unavailable in Europe]], so the blockages were not a temporary launch-week artifact. And the broader record shows why verbal pressure mattered — reporting through 2020 found GDPR hobbled by underfunded, understaffed enforcement and stalling tech companies, leaving the EDPB's main lever rhetorical.
First-order effects
- The named outlets — The Los Angeles Times, The Chicago Tribune, The Arizona Daily Star — now face direct regulatory pressure to justify blocking as a compliance strategy rather than quietly restore access or invest in GDPR-compliant consent flows.
- The EDPB has staked its authority publicly: if the blockages persist without consequence, its credibility as GDPR's coordinating body takes the hit instead.
Second-order effects
- Other US publishers watching this exchange get a clearer price signal on the two paths — building compliant consent infrastructure versus forfeiting EU traffic — and the regulator's stance tilts the calculus toward compliance spending.
- Ad-tech and CMS vendors serving US newsrooms gain a selling point, since the outage maps directly onto publishers' inability to strip non-compliant tracking from their stacks quickly.
Third-order effects
- If the pattern holds, GDPR compliance bifurcates US media into outlets that treat Europe as a market worth engineering for and those that write it off — a structural split in who can compete for global audiences under EU rules.
- The episode foreshadows the enforcement gap the 2020 reporting documented: rules written centrally but applied unevenly push companies toward risk-minimizing overcompliance like blanket blocking, which regulators condemn but struggle to prevent.
The trend: GDPR's rollout is pushing foreign publishers toward geo-blocking as a cheap compliance substitute, exposing how much of the law's real-world shape depends on enforcement capacity rather than the text itself.