• gelberhut
      link
      fedilink
      English
      01 year ago

      In this case, Lemmy contradicts GDPR, and instance admins have legal responsibility.

      • BrikoX
        link
        fedilink
        English
        1
        edit-2
        1 year ago

        GDPR only applies to companies with 250+ employees.

        • gelberhut
          link
          fedilink
          English
          1
          edit-2
          1 year ago

          Can you provide a source for this statement? According to legal clarification I checked, the rule to permanently delete user data applicable to small businesses as well.

          • BrikoX
            link
            fedilink
            English
            01 year ago

            Sorry I answered a bit out of context. Right to Erasure applies no matter the size, it’s the processing of the data records that only applies to companies with 250+ employees.

            And Lemmy is GDPR compliant now as if a post/comment is deleted it is removed within 30 days. But it falls down to each instance that federates to process those delete requests. But deleting your account doesn’t delate the content you generated not does it claim to do so.

            • gelberhut
              link
              fedilink
              English
              11 year ago

              Thanks. I fully understand that instance admins are responsible to their instance only. And single post/comment removing logic also makes sense. But the idea that removing account keeps all content untouched sounds rather questionable from a regular-user centric point of view which GDPR follows. I mean this logic would allow goigle/Facebook/Twitter etc to keep basically everything since this is mostly things you created + metadata.

              I will try to find out if/what Lemmy documentation says about this.

              • BrikoX
                link
                fedilink
                English
                01 year ago

                Lemmy definetely should add an option to delete all content when deleting the account, but I think the reason it doesn’t is that it would leave big gaps in conversations under posts (e.g. if I were to delete my comments in this thread, your comments would make no sense for anything else reading then). Alternatively they could just unlink it from the account and just leave the post/comment with some placeholder name like deleted.

                • gelberhut
                  link
                  fedilink
                  English
                  11 year ago

                  Agree - properly delete user content in a social system is not that easy as one can think. The good thing is, Lemmy is not the first social platform which must do this.