News for hackers. Stuff that matters.
Re:Reddit appears to be restoring edited/deleted comments by Pyramus on Friday June 16, 2023 @08:08AM (#36355199)
No, check GDPR Article 4 (1): personal data means any information relating to an identified or identifiable person.

The content of a post is not personal data (in general) but the things like user name etc are. The content is not relating to an identifiable person (in general) while the user name is.

Shakespeare's poems are not personal data.

Re:Reddit appears to be restoring edited/deleted comments by theRBII on Friday June 16, 2023 @08:16AM (#36355319)
Depends on the content - not many people out there are directly doxxing themselves but indirectly? Maybe.

From my post history on Reddit, you'd know where I live, my age, gender, job, relationship status and a good amount about places I've been and my interests. There are already websites that collate that info from a profile to give a summary of the user. Under GDPR, that quite possibly adds up to personal data relating to an identifiable person.

Re:Reddit appears to be restoring edited/deleted comments by vidanay on Friday June 16, 2023 @08:27AM (#36355455)
And when this is combined with Facebook/Google/Apple/Microsoft shadow profiles, it's an almost certain guarantee that information is linked with your name, DOB, credit info, and tax ID number.
Re:Reddit appears to be restoring edited/deleted comments by Pyramus on Friday June 16, 2023 @08:50AM (#36355717)
Not disagreeing with you or parent in general, that a post (or as you point out a history of posts) can be personal data.

What I'm saying is, in general it isn't. If you sign up to platform XYZ and make a post, in general, the content of the post is not personal data. It certainly can be. But by default it isn't. That's a misconception I want to dispel.

Re:Reddit appears to be restoring edited/deleted comments by Algent on Friday June 16, 2023 @08:31AM (#36355502)
Yep I agree, if you posted on a specific subreddit this is already personal information about yourself. There is no way they are not violating GDPR if they deny a request to delete (but I guess they can block direct deletion in bad faith and tell you to submit a direct request).
Re:Reddit appears to be restoring edited/deleted comments by Pyramus on Friday June 16, 2023 @09:00AM (#36355823)
I'm not saying the content of a post can not be personal data. I'm saying it is not by default.

The words "Hello world" posted on any subreddit is not personal data. In this case the company could simply delete the information relating to you such as user name, IP etc.

The content you post is not, in general, personal data. It certainly can be.

Re:Reddit appears to be restoring edited/deleted comments by Tao3300 on Friday June 16, 2023 @02:44PM (#36361731)
That's kind of funny, because "Hello World" gives a strong indication of your profession and interests. Not enough on its own to be PII, but a useful data point.
Re:Reddit appears to be restoring edited/deleted comments by koheripbal on Friday June 16, 2023 @09:42AM (#36356464)
The moment they post it publicly, it is no longer considered personal private content
Re:Reddit appears to be restoring edited/deleted comments by mynameisvlad on Friday June 16, 2023 @10:45AM (#36357391)
That’s not the definition of personal data.

I can post my name publicly, but it’s still considered personal data. It doesn’t magically become a free for all just because it’s out there.

Re:Reddit appears to be restoring edited/deleted comments by smarx007 on Friday June 16, 2023 @08:35AM (#36355529)
No, personal data in GDPR is much wider than American PII definition.
Re:Reddit appears to be restoring edited/deleted comments by veave on Friday June 16, 2023 @08:37AM (#36355567)
Maybe so, but stuff you post on public forums is not PII, neither by the American nor the European definition.
Re:Reddit appears to be restoring edited/deleted comments by SkyPuncher on Friday June 16, 2023 @09:02AM (#36355855)
Something similar happens with HIPAA that people don’t understand.

Personal Health Information is only applicable in a specific setting (a covered entity). You telling your boss/friend/form about your health information does not make it PHI. You willingly disclosed that information.m, it loses its protected status.

Re:Reddit appears to be restoring edited/deleted comments by dminuoso on Friday June 16, 2023 @06:16PM (#36364689)
GDPR has no such exclusion criteria. The definition is astonishingly simple:

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’).

Note the weight of the word “any” here.