this post was submitted on 16 Jun 2023
31 points (100.0% liked)

Reddit

13619 readers
1 users here now

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] berkeleyblue@lemmy.world 0 points 1 year ago (1 children)

I’m pretty sure that’s not an option once they receive a GDPR Data removal request.

[–] ErraticDragon@kbin.social 1 points 1 year ago

Yeah it would probably be illegal to use the data for anything in the event of a GDPR removal.

They do technically still have it in their backups, most likely. It should be covered in Reddit's ToS.

According to France’s GDPR supervisory authority, CNIL, organisations don’t have to delete backups when complying with the right to erasure.

Nonetheless, they must clearly explain to the data subject that backups will be kept for a specified length of time (outlined in your retention policy).

If you decide to go down this route, you should bear in mind that other supervisory authorities might be stricter and that you must be able to demonstrate that it’s impractical to delete backup data.

https://www.itgovernance.eu/blog/en/the-gdpr-how-the-right-to-be-forgotten-affects-backups-2