this post was submitted on 14 Oct 2023
210 points (97.7% liked)
Fediverse
28339 readers
280 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to [email protected]!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
So the entire Fediverse is illegal throughout EU under GDPR Article 17 then? That seems way too major of an issue that this was just overlooked when developing the protocol.
EDIT: Since the replies were not helpful, I researched myself and got an answer surprisingly fast. Lemmy pull request "after 30 days, replace comment.content and post.body with 'Deleted'" merged into LemmyNet:main on Jun 26. So at least Lemmy is safe in that regard.
This topic has been brought quite a few times earlier.
When you close your Gmail or Outlook email account, can you ask Google or Microsoft to ensure that copies of your emails are deleted to all the recipients you ever sent emails to?
That comparison makes no sense. e-mail is no public forum. In case I've mailed a mailing list and the archive is public, I have only the mailing list owner to ask for deletion from the archive. Private mails cannot legally be published.
I think this will end up being the same case as things that end up on search engines. I.e. you'll need to send hundreds of right to be forgotten requests to every service.
As I've written into edits of my previous comments: Lemmy pull request "after 30 days, replace comment.content and post.body with 'Deleted'" merged into LemmyNet:main on Jun 26. So at least Lemmy is safe in that regard.
GDPR isn't specific to public forums.
The context here is obviously about removing public posts, not private e-mails from the servers of the recipients.
Yes, my point is that context is irrelevant.
No. The servers that host your account comply with GDPR. If you post something on reddit and, for example, archive.org scrapes the post, reddit is not responsible for that. Adding to that, there is no personal information transmitted between Lemmy servers, only the name of your account and the content of the post.
But ActivityPub is push-based. Each Lemmy server is actively pushing its content to other servers that house subscribers.
So is email