Highlighting the recent report of users and admins being unable to delete images, and how Trust & Safety tooling is currently lacking.

  • @SupraMario@lemmy.world
    link
    fedilink
    English
    19 months ago

    What personal data is being processed by a Lemmy instance, what are they processing that’s being sold in the EU? The GDPR does not apply here, stop trying to wiggle it into something it’s not.

    • @maynarkh@feddit.nl
      link
      fedilink
      English
      2
      edit-2
      9 months ago

      Usernames at the very least, as online identifiers.

      Art. 4 GDPR Definitions

      For the purposes of this Regulation:

      ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

      And they don’t need to be sold, just retained. GDPR applies even if there is no payment anywhere, even to non-commercial entities.