A fellow mod informed me that about it as I was laying in bed. Reddit sent a message to the mod team and after 1 hour demoded me. I didn’t even had time to see it, never-mind respond to it.
Looks like we rattled reddit enough to start shooting. There goes all that fancy talk about our protest not affecting them much.
Just FYI for now. It’s late here so I’ll see how we proceed tomorrow.
Well this came up in the post where people said their Reddit posts were being restored. Even when the user deleted their account mind you. Basically there is something in the reddit TOS that with everything you post you give up your rights to that and it becomes reddit’s content. But that was from a US legal perspective. I’m not sure how that would hold up against GDPR laws.
Edit, this is the post I’m referring to: https://lemmy.world/post/186613
That’s for redistribution rights. GDPR is for protection of personal information and applies regardless of their terms of service. Some US states have similar laws.
You can hit them with a GDPR request regardless of your place of residence. But, if they fail to comply, you can only escalate if you are in the EU.
GDPR is about personal data. Not copyrighted content and licensing that copyrighted content to others (in this case to Reddit as per Terms of Use).
I meant that if you as a user chose to delete your data shouldn’t they have to under gdpr?
No, that’s unrelated to GDPR. At least in my interpretation.
Still, quite a shitty thing to do. Obviously goes directly against the users explicit intend and will.
I’m not sure they’re 100% GDPR compliant on their approach to user account & data deletion tbh. But I’m not sure and I’m not a lawyer or anything.
Basically their approach to deletion is (or at least, was) that you can ask them to deactivate your account. After this, it cannot be reactivated, your username is unavailable. However, if you want all your comments/content to be deleted, you have to go through and do it manually (this would take me months, personally…) before deactivating your account. If you deactivated your account already, your data and content is still there and you can’t go back and delete it (your comments and posts are now disassociated from your dead username). Admins can’t reopen your account and can’t (or won’t) delete it themselves.
This would theoretically be sort of okay, but what we’re seeing is that your manual comment/post deletion must only be a ‘soft delete’ because admins can clearly restore your deleted or modified comments. I’m unsure if they would be able to do this whether you deactivate your account or not - I can’t remember if those who have had this happen deleted their accounts before the posts were changed back. However I’m not sure if there’s anything more they would do to actually delete your user data if you email [email protected] with a specific GDPR request under art 17 (right to be forgotten). I can’t find that online quickly.
I think this would only apply if you are an EU or UK citizen? If you’re Californian you could refer to CCPA regulation. A couple other states have different privacy laws too that may help but they’re all different. It may be worth posting on a Privacy or legaladvice community on here to ask what Reddit’s approach is and if it holds up.