807
        you are viewing a single comment's thread
view the rest of the comments
    
  
  
    view the rest of the comments
        this post was submitted on 22 Oct 2025
        
  
      
  
      807 points (100.0% liked)
      A Boring Dystopia
    14229 readers
  
      
      600 users here now
  
      Pictures, Videos, Articles showing just how boring it is to live in a dystopic society, or with signs of a dystopic society.
Rules (Subject to Change)
--Be a Decent Human Being
--Posting news articles: include the source name and exact title from article in your post title
--If a picture is just a screenshot of an article, link the article
--If a video's content isn't clear from title, write a short summary so people know what it's about.
--Posts must have something to do with the topic
--Zero tolerance for Racism/Sexism/Ableism/etc.
--No NSFW content
--Abide by the rules of lemmy.world
        founded 2 years ago
      
  
  
      MODERATORS
      
  
     
            
          
I'm pretty sure GDPR requires websites to abide to user requests to delete their data. You may wish to review that with your company.
The GDPR applies to data pertaining to an identifiable person. Anonymised data is more or less equivalent to deleted data as far as the regulation is concerned. Source: I was a DPO for 5 years.
Oh, I see. Indeed anonymised data should be fine under GDPR. However it is often very difficult to anonymise data. Some things are easy to anonymise, other are very complex.
For a small company who does not mainly work with data, the easiest solution to comply with GDPR is indeed just deleting the data altogether.
Yes, there a concept of "pseudonymous" data in some of the guidance, which refers to anonymous data which, when taken together, could identify the person - even if some of that data is not held by the data controller. Under those circumstances seemingly anonymous data can fall under the regulation although most companies are very unlikely to consider such nuance in their data policies.
The org i used to work for had to develop a special process to delete user data upon request, it was not an easy process in dynamics365
if you want something deleted you best destroy the hard disk yourself lol
There's no independent audit for GDPR compliance so the only way to know would be if someone whistleblows. There are also so many loopholes that allows to keep the data like "to prevent further abuse" or "some legal reason".
So if reddit bans your account they can keep all data and you can't do anything about it even with GDPR.
Don't GDPR deletion requests only require deleting personal data, and not public posts?
Are you advising breaking the law just because nobody checks?
I'm saying corporations break the law if nobody checks - why wouldn't they?
That happens. Still, many companies do not. Some companies are unaware of the legislation.
I was informing one worker of a company of one such law.
Many companies do not break the law even though there are no controls just because that is the right thing to do.