I just want to add that as a European citizen you also have a right to get a copy of all your data, and an explanation how and when this data has been used.

Also, I'm pretty sure that their response "you first have to delete your comments manually" does not comply with EU guidelines.

[–] DrYes 1 points 2 years ago

https://www.reddit.com/settings/data-request

[–] VV4lle 3 points 2 years ago

Also found this blog post and made the request to Reddit for GDPR data removal. However I removed comments by using the Power delete suite (https://github.com/j0be/PowerDeleteSuite).

After few hours got email (similar as in the blog post) from reddit and followed by the instructions given in email (basically send as a reddit message confirming account deletion). Few hours passed again and got confirmation email from Reddit "We’ve now flagged your account for irreversible deletion. Please allow some time for this action to complete."

Basically not much effort needed in case you're willing to remove the comments (etc) manually or using scripts, extensions, etc.

However not sure if it would be GDPR compliant for Reddit to leave the comments if the user data is wiped out even if the username is removed from the posts.

[–] LillianVS 3 points 2 years ago (1 children)

As a European it is an option for me

[–] DrYes 3 points 2 years ago (1 children)

Read the update at the bottom. Reddit doesn't seem to want to comply with the requests. I guess you could use a deletion script.

[–] LillianVS 13 points 2 years ago (1 children)

Then they are in breach of GDPR regulations. If they don't comply I could see some serious fines heading their way

[–] neanderthal 2 points 2 years ago (1 children)

Wouldn't they have to have some sort of presence in the EU? If all of their operations are US based (I don't know if they are or not), can the EU really do anything about it?

[–] LillianVS 14 points 2 years ago* (last edited 2 years ago) (1 children)

They serve people in the EU so they absolutely have to comply. If you have EU citizens on your website then EU GDPR regulations apply to you.

I have done enough GDPR compliance training to make me want to gouge my own brain out but I guess it came in handy lol

[–] neanderthal 1 points 2 years ago (2 children)

Suppose Reddit tells them to go away. What are they going to do about it?

[–] LillianVS 4 points 2 years ago (1 children)

In my case, I could go to the ICO and register a complaint with them if you live in Europe then you can try this page: https://edps.europa.eu/data-protection/our-role-supervisor/complaints_en

Outside of Europe, the UK and California you probably won't have much luck to be honest, as they do not legally have to comply with you if you are not a citizen of any of those places.

As for if Reddit tells the EU to go away, that is suicide, whilst 49% of users are in the USA the rest of the 51% are everywhere else, that would be a very bad look for investors if the website was blocked in Europe and it would look especially bad for the company to be fined for gdpr non-compliance. So they would be in worse not to comply... Not to mention the loss in ad revenue. Nobody wants to serve ads when only half the site is going to see them. USA won't be much affected but anyone in the EU will.

They could also increase the fine, and if they still refuse to pay, sue them and seize assets. Either way, a massive headache

[–] neanderthal -1 points 2 years ago (1 children)

I am more interested in the enforcement scenario where a US business just completely ignores the fines, lawsuits, etc.

"sue them and seize assets."

How are they going to enforce that on a US company if what they did wasn't illegal in the US and the act in question was done in the US?

[–] LillianVS 4 points 2 years ago

The EU can work with US enforcement agencies, that is something that they have the power to do, as well as vice versa

Just because you are in the states it does not mean you can hide from regulations, though I am not a lawyer and this is not legal advice (obviously)

It's a two way street, and it makes sense. EU have to comply with US regulations if they are serving US citizens like any other country

[–] CheeseNoodle 3 points 2 years ago (1 children)

I believe blocking reddit in the EU is an option.

[–] neanderthal 2 points 2 years ago (2 children)

How would they implement that?

[–] [email protected] 4 points 2 years ago

Matching you IP to your country and showing you an excuse if GDPR would apply. Some American news outlets do it this way.

[–] LillianVS 2 points 2 years ago

All governments have the power to block a website, there have been sites blocked by the government such as pirate bay and MEGA upload. It isn't outside the possibility they can get blocked at an ISP level or beyond that.

They can even contact the website host which most companies will use Amazon services and they will definitely comply with EU regulations

[–] morain 1 points 2 years ago

Thanks, this is extremely helpful!