Title says it. Apparently lemmy devs are not concerned with such worldly matters as privacy, or respecting international privacy laws.
Title says it. Apparently lemmy devs are not concerned with such worldly matters as privacy, or respecting international privacy laws.
The user should not need to request all other instances to delete their data, their account is with a single server. It’s on the server admin to ensure that all exchanged data is taken care of appropriately.
If your European server shares data with an American server, that European server has A Problem. There’s a good chance lemmy.world federation with fedia.io may already be a violation. The issue isn’t as black and white of course, but the entire situation is legally dubious to say the least.
You’re right that the Fediverse isn’t like Facebook or Google where there’s one company in control. However, the downside of that is that there are millions of tiny instances, all with legal responsibilities. There are implications about privacy law, but also porn laws, propaganda laws, hate speech laws, child porn laws, and intellectual property laws.
We’re all just kind of betting on nobody ever taking any legal action here. One lawsuit can wipe out the Fediverse as we know it.
“It’s on the server admin to do the literally impossible.”
It’s not impossible at all. Some basic data processing agreements and federation whitelisting are all you need.
It is impossible. Flatly impossible. Because you cannot see if they’ve really deleted it or not. You can rely on a “data processing agreement” which, together with $50, will buy you a small cup of coffee at Starbucks.
I federate with you here from China. I will agree to anything you like. And I will just attach an array of 16×16TB hard drives to slurp up all the data you send me. How will you know this is happening?
You can’t. It is impossible for you to know until it’s too late and I’ve used it for whatever purpose profits me.
An individual server admin can only ensure the data’s existence or lack thereof on their own server. Anything else presumes (rather stupidly) that bad faith actors don’t exist.
No. I think we mostly want federating instances to respect delete requests. But only the instance actually contacted has any onus to delete on their own instance and maybe, maybe try to send requests to delete elsewhere.
There’s no way there’s an expectation that the originating instance has a legal requirement to remove it from anywhere else.