Hacker News new | ask | show | jobs
by uberman 499 days ago
The assertion that "CCPA requires companies to delete your data upon request" is not technically correct. What must be deleted is "personal information" and while I empathize with the notion that would include social media posts, I am not sure it actually does include them.

see: https://privacy.ca.gov/protect-your-personal-information/wha...

The closest thing mentioned is: "Contents of messages (e.g., emails, texts, chats)" but does that actually cover posts? I'm not sure and I can't find an authoritative answer that it does.

1 comments

How do you interpret “messages” as not including posts? I am very clearly replying with a message to you.
If your message was a DM to me then I think that would clearly be included, however, I can find no authoritative opinion that personal information includes public facing social media posts or comments. I would be happy to be wrong. Can you find a public statement by a law firm stating that under CCPA you have a legal right to have your comments deleted? I can't.
Reading the CCPA, I have to agree with you: it’s useless. It specifically excludes public information, and OP clearly made those posts publicly.