Beehaw Support

153 readers

2 users here now

Support and meta community for Beehaw. Ask your questions about the community, technical issues, and other such things here.

A brief FAQ for lurkers and new users can be found here.

Our July 2023 financial update is here.

For a refresher on our philosophy, see also What is Beehaw?, The spirit of the rules, and Beehaw is a Community

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago

MODERATORS

[email protected]

Lemmy, privacy and potential GDPR violations (beehaw.org)

submitted 1 year ago by [email protected] to c/[email protected]

13 comments fedilink hide all child comments

Been just linked to this post, that claims that on Lenny:

Messages are never deleted, only hidden, a GDPR violation
Deleted usernames are also not deleted, only hidden, same thing
Stuff remains on federated servers even if you delete it
There's no way to delete yourself from the network if you choose to do so

Gut feeling says none of this is true or is only half truths, but want to be sure before i invest myself heavily on this platform.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 1 year ago

It doesn't matter where the service is hosted, if it serves EU citizens it MUST comply with the GDPR, even if it's hosted in USA, that's why even the big companies like Google, Microsoft and all the others comply (or SAY they do, no one trusts FB on data deletion). So yes, they DO have power there.

Also, from what i understand you're assuming federation means that everything is everywhere. That is not true. From what i see from Lemmy's mechanisms (and from what my critical lack of caffeine allows me at the moment), if something is deleted on one instance it should get deleted on all as Lemmy sends the deletion request to other instances, and anything remaining from other places should be eventually deleted and flushed out of caches, that part shouldn't be an issue there. So, the instance admins would be responsible only for the data of the users in their servers, not the others. And yes, they WOULD be responsible and legally liable if this is in fact a violation (still not sure, might be OK and not even a problem as "restriction of processing" from article 18, i guess i'll continue searching tomorrow, it's 2AM here and i'm done).