you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 2 years ago* (last edited 2 years ago) (17 children)

This is a violation of GDPR, no?

EDIT: user created content is not directly protected under GDPR, only personally identifiable data is pertected under GDPR.

  • source
  • hideshow 17 child comments
  • [–] [S] 16 points 2 years ago (2 children)

    Dunno. GDPR is a Europe only thing, and isn't it only related to how your private data (like name, IP address, phone number) is cared about ?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 2 years ago

    Right, I think it only covers personal information: companies can only collect what they need to run their service, users can request to see their data etc. I don't think it applies to comments and posts.

  • source
  • parent
  • [–] 3 points 2 years ago

    I would certainly hope so. Stack Overflow content is Creative Commons licensed, so the argument is basically that the GDPR would take precedence over the CC license grant. It'd be scary if GDPR could be weaponized against forks of free software projects in this manner.

  • source
  • parent
  • [–] 2 points 2 years ago (12 children)
  • [–] 5 points 2 years ago (11 children)

    User should have the right to delete their data stored by the company.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 4 points 2 years ago (3 children)

    Would that kind of provision allow me to have my code removed from a git repository history, if that git repository is hosted by a company?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 years ago* (1 child)

    I am not a lawyer, but I believe in general, yes.

    Git is not even that convoluted, as all the history is stored in the .git folder within the repo. Unless there is some convoluted structure built on top, they would only need to move the repo folder to a trash disk, waiting to be formated.

    That being said, GDPR is somewhat poorly enforced at the moment, unfortunately. I don't know if you can sue the company and expect some result within couple of years.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 years ago (5 children)

    Doesn't that just mean the data would have to be anonymized ?

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 2 years ago (4 children)

    I am not a expert or a lawyer, but I believe user actually hold the right to completely erase personal data:

    The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay

    https://gdpr.eu/right-to-be-forgotten/

    Note the word "erasure" as opposed to "anonymize"

  • source
  • parent
  • hideshow 4 child comments
  • [–] 5 points 2 years ago (3 children)

    I don't think that addresses my point. Is my opinion on the new Star Wars movies that I post online or some lines of code I suggest "personal data"? I thought personal data had a specific definition under GDPR

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 2 years ago

    Technically, they could retain posts from users if they are irreversibly anonymized. However, ensuring with 100% certainty that none of your posts ever contained any personal data that could lead to the identification of you as an individual is challenging. The safest option is therefore to also delete your posts.

  • source
  • parent