[vonmoltke]

Just because a bunch of forums do it that way doesn't mean it's correct. When I was at Twitter the Compliance team determined that all user-generated content was Personal Data under the scope of GDPR. Those forums may be getting away with it right now, but they're playing with fire. If someone wanted to raise a stink with regulators they could be in trouble. I guarantee you if Reddit or a site of similar scope tried something like that someone would.

[cinntaile]

I know of two forums in two different EU countries that have also consulted with lawyers and determined that it was sufficient. I am inclined to give higher weight to your opinion simply because Twitter Compliance will have access to a larger team of lawyers, do you know if they were American lawyers or EU lawyers?