571
cross-posted from: https://programming.dev/post/36063172
this post was submitted on 21 Aug 2025
571 points (99.0% liked)
Technology
74324 readers
3695 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
That's probably a massive GDPR violation. Automated processing of extra sensitive data like political beliefs and religion is not outright forbidden but it's subject to extra protections.
Sadly you consented to all of it
GDPR article 9 (1) says you can't play algorithmic guess with people's religion or political opinions unless you gave express permission to the service provider to do it (i.e. it's not covered in the general GDPR boilerplate)
Hard agree with this. Does Reddit even have lawyers, or are they just using ChatGPT? Google, Meta, and Tik Tok already paid PII misuse fines for less than this. everything listed is part of the GDPR extended PII list.
Unrelated question: How do I short reddit stock?
GDPR prevents using underhanded tactics to assume consent for this type of use.
Have there been any enforcement actions against big companies yet?
Meta got a fine of over a billion euros. Google got a bunch of smaller fines, but it's probably way above everyone else in terms of fines. Microsoft got half a billion. Even Apple got an 8 million euro fine, but that was more a tap in the wrist to make them think twice about some data collection.
And besides this, large companies are constantly in contact with the authorities and in smaller violations the general policy is to give a warning and let companies stop the illegal data processing voluntarily.
All of them are a slap on a wrist, even Meta
https://proton.me/tech-fines-tracker
I’m so jealous.
I doubt it, since all it ostensibly does is summarize info the user has released freely. How that info is stored and retained exactly might be up for debate though.
Nah, I think all of it is literally just public data offered up by users themselves. If you didn't want those opinions shared, you shouldn't have posted them on Reddit.
GDPR also applies to data you get from public sources.
I don't understand.
If someone writes a reddit post and says "I'm fasting for Ramadan," can I not infer from that public post that the user is probably Muslim?
You cannot use an algorithm to correlate it with other data without express consent.
What counts as an algorithm? Surely it can't be the actual definition of algorithm.
Because in most forum software (even the older stuff that predates reddit or social media) if I just click on a username, that fetches from the database every comment that the user has ever made, usually sorted in reverse chronological order. That technically fits the definition of an algorithm, and presents that user's authored content in a manner that correlates the comments with the same user, regardless of where it originally appeared (in specific threads).
So if it generates a webpage that shows the person once made a comment in a cooking subreddit that says "I'm a Muslim and I love the halal version" next to a comment posted to a college admissions subreddit that says "I graduated from Harvard in 2019" next to a comment posted to a gardening subreddit that says "I live in Berlin," does reddit violate the GDPR by assembling this information all in one place?
They will get your data from everywhere not just reddit. There needs to be many more laws and punishments for doing this.
Yeah this seems illegal as fuck
The title is likely inaccurate. The post only contains a summary of the user's posting history. It makes no statements regarding the user's beliefs.