Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In theory at least the EU could arrest company representatives should they ever visit the EU and they can confiscate funds or equipment destined for your company if it should transit trought the EU. Whether they would go that far for the GDPR is another question. Usually its a lot easier to just comply which is why most companies consider GDPR to some extend or at least pretend to.

As for the original question, I don't see how deleting your reddit account would require an external archive based on publicly available data to follow that deletion. If there is personal data then you might have a basis for requesting it be removed but surely you'd need to make that request to whoever hosts the archive directly.



It’s really not that simple.

GDPR requires that there be a lawful basis for processing personal data (e.g explicit consent). If the archiving service is releasing the data without the explicit consent of the individuals involved and doesn't have another lawful basis for processing, it could potentially be in violation of GDPR.

Under GDPR, data subjects have certain rights, including the right to access their personal data, the right to rectification if the data is inaccurate, the right to erasure (also known as the "right to be forgotten"), the right to restrict processing, the right to data portability, and the right to object to processing. By releasing a torrent of the dataset, the archiving service is very likely to be infringing on these rights.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: