742
PSA: You can't delete photos uploaded to Lemmy. So don't (accidentally) upload a nude
(tech.michaelaltfield.net)
this post was submitted on 04 Mar 2024
742 points (97.9% liked)
Technology
59605 readers
3501 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Lemmy is not a singular software or website, every instance on its own need to ensure compliance with their respective laws where they are domiciled.
But if instance A is domiciled in the EU, and the content mirrored to instance B in Zimbabwe, where no right to be forgotten exists, then a user of instance A can't invoke any laws beyond what the local admin can control.
That's amazing for high availability of content - it's essentially mirrored in perpetuity - but a nightmare for privacy advocates. AFAIK there haven't been any court cases related to deletion requests, so that's still virgin territory.
Instances located in Zimbabwe still have to comply with the GDPR, as the law applies to any entity that processes EU citizen's personal data, regardless of where this happens. Instance B would also have to comply with a deletion request, or whatever EU member state the citizen is from will impose a fine and seize assets if necessary.
This is the stupidest claim GDPR makes. It's completely unenforceable and it's attempting to enforce EU law in countries outside of the EU, which goes completely against any norms in international relations.
It absolutely is enforceable, and the EU has already enforced it several times.
The EU can of course try to seize assets, but in many cases they have signed a treaty with other countries stating they have the right to enforce the GDPR within their borders. Think a bit in the sense of an extradition treaty. For the US, this is the EU-US Data Privacy Framework for example.
This means the EU absolutely can, will and has the means to enforce the GDPR abroad.