779
Former user, I've deleted my 12 years old account when Boost stopped working. I am not sure what can I do, I would gladly sue tbh.
If they still have your comments on the site then you still have a claim.
If they don't have the comments on the site, they probably do still retain the content secretly and technically you would have a claim, but it would be impossible to prove.
Au contraire. If they didn't delete the information when asked to under the GDPR, and they get caught deleting evidence after a suit was filed (civil by one of us, criminal by the EU), they're in even bigger trouble. Reddit would have to be very careful to cover their tracks, and they won't be careful enough.
My DPO basically told me that since reddit told me (I contacted reddit first as per the GDPR) that I can delete my comments myself I should go ahead and do that, and that my case was closed. Even after telling her that there were still 2 comments visible only when my profile is viewed "signed out", and I provided a screenshot of a regular browser window where I am signed in and an incognito window where I am not, her reply was that once I delete my account they will not be linked to me in any way so they do not violate the GDPR...
It might not violate GDPR, but there's still copyright to it. Reddit haven't provided consideration in exchange for the rights they claim to your comment - access to the website is offered free of charge, regardless of whether you post.
Granted, that's a different avenue entirely, you'd have to take them to court for selling your work to train AI.
load more comments
(2 replies)
load more comments
(1 replies)
Boost hasn't stopped working. I'm still using it and I've used it everyday.
I have Boost for Lemmy and Reddit. Their icons are identical.
Could we sabotage the LLM training so the data became worthless?
Like adding to our comments stuff like "2+2=5" "Abraham Lincoln discovered America" and whatever silly statement you can think of
I think reddit is already sufficently full of misinformation that you dont need to add to it
Someone less lazy than me should use a script to feed existing comments into an LLM, which then reproduces a convincing sentence structure but incorrect gibberish content, and then edit all a user's comments - gradually, not all at once - to the poisoned content. Like 4chan did with the original captcha, but on a wider scale.
"Wipe out all of Europe"
Reddit definitely doesn’t seem like the kind of business that might utterly disregard such requests while insisting outwardly that they are complying.
The requests don't go to reddit, but the supervisory authorities. They can try and ignore those requests, but since they have offices in the EU, those can and will be slapped around - if any DPA takes action, that is.
Isn't it a violation once they do something?
Maybe its illegal to make impossible promises to investors, but the GDPR supervisor authority wouldn't be the place to make that complaint...
It is not clear if reddit has already engaged in this with Google, or if it is something that's only starting. However, as outlined in my post, they might have to consult with a DPA before engaging in this anyway, which I doubt they have done. So, no, DPAs are absolutely the right place to make that complaint.
Even if they hadn't started yet, might as well get their eyes on it, and force them to do it right from the get go (which they cannot do, as it currently stands).
You really believe a large Corp like reddit decided on something as big as this without consulting with their lawyers? Fuck spez, but there's no way not a single lawyer working with reddit remembered the massive legislation that has by far had the largest impact on the internet in years.
Corporate lawyers tend to be ...optimistic. And then management will put a risk calculation on top of that. As a result, most larger companies violate the GDPR. See the popular use of Google Analytics or Microsoft 365, for example, which are illegal in the EU, if you ask a DPA¹. Giving them a reality check is never a bad idea.
¹) https://www.imy.se/en/news/four-companies-must-stop-using-google-analytics/
https://news.itsfoss.com/microsoft-office-365-illegal-germany/
load more comments
(1 replies)
Yeah, a formal complaint isn't quite intended for this purpose. Just writing to your data protection authority/officer to let them know that this is important to look after, will do the same here. They can then hand out a warning to Reddit.
Former reddit user, deleted my accounts just a few weeks back, should I feel concern that my data may still be involved? I guess there would be no GDPR recourse for me anyway?
Did you also deleted your comments and posts?
Yes, all content possible, before deleting my account.
You didn't delete anything. You told reddit to delete stuff, but whether they actually did that is a different question. It isn't public on their website anymore, but the data might still be lying around on their servers
Yea they keep all the data. I deleted everything on my account when the whole shitshow happened and then GDPR requested the data associated with the account and it was all still there. And when I requested that they delete that too they outright refused.
i would love to see the answer from reddit because that sounds extremely illegal. keeping the data alone is already a violation.
If you're in the EU, I hope you have documentation of that. Could prove useful.
Can you post a short version of what you sent them for inspiration?
That sounds like a gdpr violation. Companies can keep some things under the gdpr even when asked to delete them but i doubt your comments or whatever fall into that category.
Elsewhere in this thread, somebody mentions that Reddit only needs to unlink your comments from your identity in order for it to be technically legal for them to hang on to them.
But if you do a GDPR request for your account and it comes back with your comments, they clearly haven't even done that.
You can ask to have everything related to you, to be deleted. Just provide your email.
Done. Simple process and can do it “anonymously”
Where?
For the dutch its: https://www.autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap
But to be honest I think its already on their radar since its also in the news here (some) but every bit helps (i think)
Like the topic says in the last paragraph “ Find your supervisory authority (just use google, for added irony) by searching for "Data Protection supervisory authority [the state you live in]". but with state you should fill in your country.
...Any chance you could share what you wrote, for the truly lazy among us? Asking for a friend.
load more comments
(1 replies)
PSA: GDPR still applies in law in the UK too; it has not been repealed
*UK GDPR. Because all EU legislations prior to Brexit have been made into domestic equivalents when the UK left the bloc.
...yet.
Ive been engaged in discussion with my country's data protection officer since the summer, and the reply I got was that I should delete comments myself. There are 2 comments that appear on my profile only if viewed while I am signed out, and when I raised the concerns with her I basically got the reply that "there is no personal information contained within and once you delete your account there is no username attached to them so you cant be linked with them". Is she right, and how do I handle this situation?
As I understand it:
As long as the link between data and user is severed, they are compliant with GDPR. Anonymising data (proper non-reversable anonymisation, rather than pseudo-anonymisation) is as good as deleting. As long as it's not personally identifiable, it's OK.
I suspect anyone else expecting the EU to purge reddit of their comments will be equally disappointed.
load more comments
(3 replies)
The DPAs have discretion on how they interpret the laws and what guidance they give. This is something you could only really pursue through litigation beyond what reply you're getting from your DPA. Personally, I am not trusting reddit to actually, truly delete anything. But there would need to be proof for that, beyond my suspicions.
If deleted was truly deleted, I'd say they're right on an individual case.
The issue I'm outlining is however of a different nature, so I am somewhat hopeful at least some DPA will take this issue on.
load more comments
(3 replies)
Even threatening with a GDPR request was taken seriously by them half a year æg when I deleted my account.
Done. Screw Reddit.
Is there a way to export my data from reddit and archive it on Lemmy instead? I dont want my valuable contributions of difficult-to-find information to be lost forever by just deleting it
Honestly you can just leave it be. If you stop generating new content the value of Reddit will drop.
load more comments
(1 replies)
Any based users in general, really
Are there any comment shredding utilities that still work after the API apocalypse? I'm an American, so I can only look at you GDPR-havers in jealousy.
Use a VPN to exit from an Irish proxy and make the report in Ireland.
view more: next ›
this post was submitted on 23 Feb 2024
779 points (98.9% liked)
Privacy
30011 readers
1492 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 4 years ago
MODERATORS