Asklemmy

44167 readers

1359 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
[email protected]: a community for finding communities

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago

MODERATORS

[email protected]

148

Lemmy and GDPR - What is the current state? (lemmy.world)

submitted 2 years ago* (last edited 1 year ago) by [email protected] to c/[email protected]

87 comments fedilink hide all child comments

As the Fediverse grows more and more, rules and regulations become more important. For example, is Lemmy GDPR compliant? If not, are admins aware of the possible consequence? What does this mean for the growth of Lemmy?

Edit: The question "is Lemmy GDPR compliant" should mean, does the software stack provide admins with means to be GDPR compliant.

Edit2: Similar discussion with many interesting opinions on lemmy.ml by /u/[email protected]> https://lemmy.ml/post/1409164

Edit3: direct link to philpo great answer-->https://feddit.de/comment/840786

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 9 points 2 years ago* (last edited 1 year ago) (2 children)

[This comment has been deleted by an automated system]

[–] [email protected] 3 points 2 years ago (3 children)

Isn't the key operating word here business?

With no advertising on the line and no operations currently in place operating at anything but a loss there isn't a commercial interest at stake.

[–] [email protected] 4 points 1 year ago

Governments also have to comply with GDPR. They also have no commercial interest in the personal data.

[–] [email protected] 4 points 1 year ago

Nope, GDPR does not limit itself on businesses. It applies to all data collection.

[–] [email protected] 2 points 2 years ago* (last edited 2 years ago) (1 children)

My statement about it being up to those running instances is mean in terms of it's up to them to read the legislation and come to a conclusion. If I were hosting an instance I'd certainly assume it applied, though I doubt there has been any case testing its implementation in this sort of situation.

I can see someone starting a lawsuit against a standards incompliant server that ignores deletes and edits, though.

I wonder if the first data breach will draw the attention of a regulator. We're all using essentially alpha software, with no privacy notice, I doubt there are RoPAs or DPIAs, I doubt there is a DPO.. all those things might upset someone like the ICO in the UK if a breach were to occur.

Edit: saying that, I'm not sure any breach would even be reportable given what data is collected by Lemmy.

[–] [email protected] 3 points 2 years ago* (last edited 1 year ago)

[This comment has been deleted by an automated system]