8
GDPR
(lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 07 Jul 2023
8 points (56.9% liked)
Fediverse
28353 readers
234 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy
founded 1 year ago
MODERATORS
Your email address (personal identifier) is right there in the from field. And in many cases, in the header there might be your IP address.
How is that a breach of GDPR?
Our point is, sharing the information required to make a network like this work is allowed provided you're not sending information not required. If you right a post on a community that is shared the information about you (user id, avatar etc) is required to render that message on other federated instances. In the same way as when you send an email the from address is required so that people can reply to the email.
If we were sending IP addresses and data on your browsing preferences to other instances, there would be an argument because it is not required operate the federated network (although you know the corporate players are all justifying their sharing of exactly that data and more). But we don't do that.
Thank you! Understand - I think the issue is there there is no documented policy on some instances, I don't know how each instance handles / shares my data and what the retention policies etc are. I seem to remember there are more controls required depending on where the data is being transferred to. Anyway, that's getting beyond what I am familiar with!
Yes, definitely and this has prompted me to write one up for mine. Even though right not it is just me, I am open to having around 100 active users on my instance. So this should be clear I think.
Awesome! I'm pretty sure there are some great websites with resources if you need it, although they likely come with a caveat they are not legal guidance :)
The ICO have a template. But now I need to go through and see what data is collected and check/adjust retention where relevant (http logs for example).