Hacker News new | ask | show | jobs
by m-p-3 1093 days ago
I doubt that is GDPR-compliant.
3 comments

A 30-day lag in deletion is compliant IF you communicate that that's what you do (i.e. write that down in your privacy policy).
Yes, but after that there should be a wipeout.
You could argue that it's not the comments themselves that are personally identifiable, but the association between comment and username (and IP etc). Following that argument, you could retain the comments as long as you delete the username and other identifying info.

Not sure if that would hold up, as some comments can be pretty identifying. But it's a compromise that a company could try.

Is GDPR only for PII? My understanding was that it applied to your data, regardless of PII status
Does reddit have any kind of business presence in the EU ? How would the EU law be enforced?
They sell their Reddit Gold in the EU and sell advertising space to European companies.
Presumably there are EU companies paying them for ads
If reddit employees want to travel to europe then a way to enforce it can be found