Hello fellow Lemmings!
Title. Is it possible for Lemmy to abide by the GDPR given that you can’t delete info from other instances?
Companies abiding by the GDPR are not required to delete your account or content at all, only Personally Identifiable Information (PII).
That’s a Usamerican point of view, and when we are talking about the EU’s GDPR, it is wrong.
You need to talk about all data that is, or can be, related to a person.
If I’ve got it right it’s anything that can directly or indirectly identify you. I would’ve thought most things here wouldn’t fall under gdpr except maybe email addresses or if they’ve specifically mentioned something identifiable in comments or posts. One other thing I think that might be a problem is the data on pictures from a phones camera might indicate where and when it was taken which could narrow down that users location. I know some hosting sites strip this data but some might keep it.
anything that can directly or indirectly identify you
No.
Anything that is related to you as a person. This is more than the things that identify you. For example things that you have done, places where you have been … comments that you have written… You could say: all that your stalker wants to know about you.
I would’ve thought most things here wouldn’t fall under gdpr except maybe email addresses
All things here fall under the GDPR, but maybe not all things must be deleted on user’s request. That is a different question then! For example, one could argue that by posting an article or a comment, the user has agreed that it gets published here and then it cannot be taken back.
