Anything else to consider when hosting a Lemmy instance in the EU?

tk338@lemmy.one · 1 year ago

Anything else to consider when hosting a Lemmy instance in the EU?

Max-P@lemmy.max-p.me · 1 year ago

Interestingly, they’re clearly aware of the existence of the Fediverse: https://edps.europa.eu/data-protection/our-work/publications/techdispatch/2022-07-26-techdispatch-12022-federated-social-media-platforms_en

TheButtonJustSpins@infosec.pub · edit-2 1 year ago

However, this duplication mechanism renders content deletion or rectification more difficult. In case of deletion by the user, the platforms with duplicates receive usually an automated deletion request and must be trusted to comply and delete their duplicate.

Seems like sending the delete notice is all that’s required?

Max-P@lemmy.max-p.me · 1 year ago

Seems like sending the delete notice is all that’s required?

Yes, but

and must be trusted to comply and delete their duplicate.

So because of that trust factor, if you really want to protect yourself and be 100% GDPR compliant, you’d probably want a legal contract with every instance to federate with ascertaining that they are GDPR compliant too to legally deflect blame if you’re unable to comply with a data delete request.