this post was submitted on 13 Jun 2023
2089 points (98.5% liked)
Lemmy.World Announcements
29077 readers
154 users here now
This Community is intended for posts about the Lemmy.world server by the admins.
Follow us for server news 🐘
Outages 🔥
https://status.lemmy.world/
For support with issues at Lemmy.world, go to the Lemmy.world Support community.
Support e-mail
Any support requests are best sent to info@lemmy.world e-mail.
Report contact
- DM https://lemmy.world/u/lwreport
- Email report@lemmy.world (PGP Supported)
Donations 💗
If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.
If you can, please use / switch to Ko-Fi, it has the lowest fees for us
Join the team
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
What’s stopping Reddit from checking your IP and seeing that you’re not from the EU and restoring your data from a backup
IANAL, but how the GDPR is formulated. Reddit would need to prove that you are not an EU citizen, iirc.
So it’s not enough to prove that the IP used is not from the EU and that therefore it’s (supposedly) not under EU jurisdiction?
It covers EU citizens traveling abroad?
If so, dang that’s a good law
According to WP: The GDPR also applies to data controllers and processors outside of the European Economic Area (EEA) if they are engaged in the "offering of goods or services" (regardless of whether a payment is required) to data subjects within the EEA, or are monitoring the behaviour of data subjects within the EEA (Article 3(2)). The regulation applies regardless of where the processing takes place.
Source: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation#Applicability_outside_of_the_European_Union
It would leave them open to potentially devastating legal consequences if an affected EU citizen can prove in court that reddit makes money of his content, which he deleted. Also the "right to be forgotten" as in the GDPR formulated would be violated.
IF reddit really goes that way, they'd have to anonymize at least the usernames. Which would make it extremely hard to prove that something is "your content" and not someone elses.