[maxidorius]

I can only be happy to see that the research we made and the documents [1] we produced some months back have lead to changes that improve privacy in Matrix. It is a huge win for our nonprofit Libre Monde [2].

We are especially happy to see you will now be lawfully processing GDPR Access requests by keeping the scope tight, and no longer include the full account history, confirming our statements in the Part 2 of the research that it was indeed unlawful to do so, and will inform the ICO accordingly.

Hopefully the remaining points in terms of privacy will be addressed!

[1] https://github.com/libremonde-org/paper-research-privacy-mat... [2] https://www.libremonde.org/