@seacocker@lemmy.world avatar

seacocker

@seacocker@lemmy.world

This profile is from a federated server and may be incomplete. Browse more on the original instance.

seacocker,
@seacocker@lemmy.world avatar

ASking out someone the day after leaving a long term relationship doesn’t seem like the best decision and makes me think he might actually be the douche bag here.

seacocker, (edited )
@seacocker@lemmy.world avatar

Wither GDPR applies to an individual instance will be up to those running the instance to decide.

If you decide it does, then you need to do a few things. Number one is read up advice on compliance with GDPR.

Being able to delete data alone doesn’t mean GDPR compliance. I’m thinking about the need for privacy notices on sign up, retention schedules for data, lawful basis of processing, records of processing activities… Data subjects have numerous rights, which apply depend on the lawful basis you’re processing under.

I’d suggest that larger general instances might want to read up more urgently than smaller single focus “hobby” instances.

edit: more I think about this, I think there is an moral responsibility for the developers to help those running instances comply. If GDPR does not apply to an instance, it is still good practice to allow uses to delete their data, etc… Also, art. 20 of GDPR is the right to portability. Interesting to see how this applies to fediverse platforms like Lemmy.

umbraroze, to RedditMigration
@umbraroze@kbin.social avatar

As I recall, Reddit really dragged their heels in implementing GDPR-mandated data checkouts, citing technical challenges and privacy issues, but I'm sure it was more about the technical challenges and laziness (old codebase that has kind of sucked since forever and they're not keen on touching it). This was when the law went into effect in 2018.

I requested archives of my data from Reddit as per GDPR a few weeks ago, and it's still pending. And the page said "oh, uh, we'll provide them within 30 days." ...which is well within the letter of the law, if not the spirit. Other sites I've requested my data from can provide it within days, usually.

All I can say as someone who's been perplexed about Reddit's tech side for a long time is that it's pretty damn emblematic of the whole site.

seacocker,
@seacocker@lemmy.world avatar

They might not have bothered to implement an automated setup just for EU & UK users, meaning it's an ad-hoc process each time. If they go over the 1 month you can head over to the ICO website and file a report.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #