523
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 15 Jun 2023
523 points (100.0% liked)
Reddit Migration
196 readers
1 users here now
### About Community Tracking and helping #redditmigration to Kbin and the Fediverse. Say hello to the decentralized and open future. To see latest reeddit blackout info, see here: https://reddark.untone.uk/
founded 1 year ago
GDPR (for EU users) and CCPA (for Californian users) both have the right "to be forgotten", which means they must delete all your data upon request. Even if they block the third-party bulk deletion sites that use their API, they should still delete all your data upon request, at least if you're in a jurisdiction with such a requirement.
It isn't that powerful. They don't have to remove comments or posts if they don't contain any personal data that you can be identified with.
Don't they have to delete all "my" data though? I guess I'm not sure of the specific wording of the laws, but at my workplace we delete all data that's directly related to the user (data they created, plus any other data collected or logged about them), even if it doesn't contain any personal data. The systems that handle this are super complex so I wouldn't be surprised if a lot of companies don't handle it well.
Yeah, but with what they've pulled off so far they have been perfectly following the playbook for a "data unlawfully retained" scandal for reddit. Some GDPR fine.