Hacker News new | ask | show | jobs
by rrix2 2982 days ago
GDPR's right to portability only extends to things you provide directly, or are collected on the basis of explicit consent, or wmthings which are required to fulfill a service or contract, like status and photos. There are explicit exclusions for a lot of things like things collected in service of antifraud & security efforts, and for things collected offline (IIRC), leaving a big set of holes that they can hide quite a bit.

They're also not allowed to infringe on the data rights of other users which is why the friends list export is so anemic, for example.