Title says it. Apparently lemmy devs are not concerned with such worldly matters as privacy, or respecting international privacy laws.

  • Silverseren@kbin.social
    63·
    8 months ago

    It’s been a problem for a while. Considering major social media companies have already gotten massive fines from the EU for violating the GDPR, maybe the lemmy devs will put more effort in setting up a deletion system once the EU sends them a fine for breaking the law?

    • ttmrichter@lemmy.worldEnglish
      91·
      8 months ago

      They can’t fine the “lemmy devs” (nor any other Fediverse devs). They can fine the operators of servers, and even there only those operating servers in the legal jurisdiction of the EU (which is checks notes the EU).

      • 0xtero@kbin.social
        2·
        8 months ago

        In this case, the “lemmy devs” and the operators of lemmy.ml are the same people and it’s hosted within EU.
        But - that’s still a far cry from getting any kind of GDPR violation report going, much less getting it through the process to actual fines.
        People like to bring up GDPR violations as a some kind of super-moderator tool, but it isn’t that easy and it definitely isn’t automated.

        • ttmrichter@lemmy.worldEnglish
          2·
          8 months ago

          You are missing theseveral points.

          1. Lemmy is software. lemmy.ml is a server. The devs of Lemmy can’t be fined unless specifically the server they operate (lemmy.ml, recall) is doing something against the GDPR.
          2. There is more than Lemmy in this picture. You’re on kbin. There’s dozens of other servers based on ActivityPub out there, all of which can be breaking the GDPR. This non-problem is not related to Lemmy. It’s the foundational architecture of ActivityPub. (And HTTP, incidentally. And XMPP. And and and and… Literally every distributed protocol ever made or that ever will be made has this non-problem.
          3. The things people are complaining about here may not actually even be covered by GDPR.
    • FaceDeer@kbin.social
      3·
      8 months ago

      The EU doesn’t have global jurisdiction, if an instance developer or admin has no EU presence then they could just ignore them.

      • jman6495@kbin.social
        2·
        8 months ago

        Sure, but EU data protection laws may require EU based Lemmy instances to block instances that dont honour deletion requests.

        This is why mastodon was built GDPR compliant by design.

        • FaceDeer@kbin.social
          21·
          8 months ago

          “Lemmy” is a piece of software. A piece of software can’t violate the GDPR, it’s just a blob of data. You need to be running a server to do something that would break the GDPR. Those server-running admins are the ones that need to be concerned about their EU presence.

          Maybe some of the people developing Lemmy are in that category and might get in trouble, but it will be because they’re running servers not because they’re developing Lemmy. If they get arrested or whatever it has no effect on Lemmy-the-software.