Highlighting the recent report of users and admins being unable to delete images, and how Trust & Safety tooling is currently lacking.

  • RubberDuck@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    10 months ago

    We can expect them to follow the law. And yes this means implementing required features to comply with the law.

    • SupraMario@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      10 months ago

      Nothing here is breaking any laws. I don’t know why OP thinks the GDPR applies here, it doesn’t.

      • maynarkh@feddit.nl
        link
        fedilink
        English
        arrow-up
        4
        ·
        10 months ago

        It does apply, but not to the Lemmy devs, but to the instance admins.

        As it stands, you can’t legally host a Lemmy server in either the EU or the US (or places they can reach) and federate with the 'verse at large without fear that the authorities will come after you.

        • SupraMario@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          10 months ago

          This is not true at all, you can host a instance in the USA for free and not be subjective to the GDPR. You’re not selling anything, or marketing anything or doing any data collection to be sold. It %100 does not apply.

          • maynarkh@feddit.nl
            link
            fedilink
            English
            arrow-up
            2
            ·
            10 months ago

            GDPR article 3, and the EU-US Data Protection Umbrella Agreement concluded in the US in December 2016 which makes it US law disagree.

              • maynarkh@feddit.nl
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                10 months ago

                Lemmy instances offer services to me as an in-EU data subject, and that makes it subject under the very Article 3/2 (a) you linked.

                the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union

                Since there is federation, a US-based instance would still be a data processor if it IP blocked be as coming from the EU.

                I did in fact read it.

                • SupraMario@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  10 months ago

                  Read the rest of it, instead of cherry picking shit. The instance needs to be collecting your data and selling it or making some sort of money off of it.