On forums and chat servers I accept any personally identifiable information that the member volunteers. They can also upload an image of themselves and input their birthday and real name. I also have access logs that can be used for geolocation. They can upload pictures and videos. My interpretation of the law as I have seen it would include most people running self hosted forums and chat servers. Members of forum and chat servers can say where they live. The best I could do to stop that would be to ban them and delete their messages if I suspect they are under 18.

I would never sell this information but I have no way to prove that I never have. And while I do not believe I could be hacked, what happens when I am and the attacker sells this information? Did I violate this specific law or did they? Who is liable?

How are Discord and Slack dealing with this? Discord have a massive population of minors and they collect a massive amount of information.

Have any tech-savvy lawyers on HN offered their interpretation yet?