GDPR also allows you to do a data deletion request.
Not necessarily deletion, anonymization would free your info from any GDPR requirements and Reddit couldn't care less if your username is there or not
Shitty life protip: edit all your comments to include PII and then Reddit will be in violation of the GDPR 😆
Considering that you could hypothetically leave personal information in your comments, would those comments not also need to be deleted?
Yes, if the comments contain PII after your article 17 request Reddit would be in violation
Ah yes, the "Right to be forgotten"
You are correct, of course. However, they are well within their rights to not delete your data. Look up "Legitimate interest" - it's a huge GDPR loophole and widely abused. (Certainly in charity fundraising in which I used to work)
The LI can be for their own business purposes, including profiling, machine learning and of course, advertising.
It can also, and usually is, need to keep data in case they receive a legal order to provide it. In the event of Reddit being used for terrorism purposes (which I'm sure it has, along with every other messaging platform), they will be required to produce that information. Which they can't if it's gone.
We wave the GDPR around like it solves all our problems. And whilst it does add a huge amount of public protection and it's impressive it made it into law given those objecting to it, it does not give you the right to your own data above all else.
GDPR also allows you to do a data deletion request.
Not necessarily deletion, anonymization would free your info from any GDPR requirements and Reddit couldn't care less if your username is there or not
Shitty life protip: edit all your comments to include PII and then Reddit will be in violation of the GDPR 😆
Considering that you could hypothetically leave personal information in your comments, would those comments not also need to be deleted?
Yes, if the comments contain PII after your article 17 request Reddit would be in violation
Ah yes, the "Right to be forgotten"
You are correct, of course. However, they are well within their rights to not delete your data. Look up "Legitimate interest" - it's a huge GDPR loophole and widely abused. (Certainly in charity fundraising in which I used to work)
The LI can be for their own business purposes, including profiling, machine learning and of course, advertising.
It can also, and usually is, need to keep data in case they receive a legal order to provide it. In the event of Reddit being used for terrorism purposes (which I'm sure it has, along with every other messaging platform), they will be required to produce that information. Which they can't if it's gone.
We wave the GDPR around like it solves all our problems. And whilst it does add a huge amount of public protection and it's impressive it made it into law given those objecting to it, it does not give you the right to your own data above all else.