| > Under GDPR Article 20 Why GDPR. Didn't you say you're from Russia? > DPO request unanswered beyond automated ticket GDPR allows companies 30 days to answer, or telling you they need more time to answer. > FTC complaint filed Why FTC. Didn't you say you're from Russia? > Filed formal legal appeal (7 pages) I'm guessing the pages were largely AI generated? > This is, de facto, theft of intellectual property. At this point I'm laughing and wonder which AI lawyer gave the confidence to suggest that. > No export. No backup. Having no backups is hardly the provider's fault. > Project migrated to GitLab That sounds like you have the code at least and can recreate the data. |
GitHub is a US company that processes data of EU residents. They're subject to GDPR. I've been in cybersecurity since I was 14 — data protection laws aren't new to me.
Additionally, California BPC § 17200 applies since GitHub is California-based.
> GDPR allows companies 30 days to answer
Correct. I filed the DPO request on March 17. The 30-day window hasn't expired. I'm sharing this now because the permanent ban came 70 minutes after my legal appeal with no review of the actual arguments.
> Why FTC. Didn't you say you're from Russia?
FTC accepts complaints from anyone regarding US companies. GitHub is US-based. Their business practices affect international users.
> I'm guessing the pages were largely AI generated?
I used AI to help with English phrasing — it's not my first language. The legal framework and arguments are mine. I've been interested in cybersecurity, privacy, and cryptography since I was 14. I considered getting into cypherpunk circles at one point. GDPR Article 20 isn't exactly obscure knowledge for someone in this field.
> theft of intellectual property
Fair point on the wording. More accurately: GitHub is refusing to provide data portability as required by GDPR Article 20. I retain copyright but am being denied access without due process.
> Having no backups is hardly the provider's fault
You're right I should have had backups. But GDPR Article 20 grants an unconditional right to data portability. "You should have backed up" doesn't exempt a company from legal obligations.
> That sounds like you have the code at least
I had a local copy of the VPN client (rsquad) from March 2. I lost: - Other repositories (hpp, node-filter, loshad-scoc, zhopa-bobra) - All issues and pull requests - Wiki content - Release packages - Account settings, SSH keys, GPG keys