this post was submitted on 17 Mar 2026
15 points (100.0% liked)

General Data Protection Regulation (“GDPR”) ⚖

1386 readers
1 users here now

Everything related to the #GDPR is discussed here. This is the first and only community specifically for GDPR topics which is decentralized and outside of walled-gardens. #EDPB recommendations and guidance can and should also be discussed here.

For the moment, chatter on the similar California Consumer Privacy Act (CCPA) could be discussed at least until the volume of messages compels us to split it into a separate community.

founded 2 years ago
MODERATORS
freedomPusher@sopuli.xyz
15
KYC is becoming: know your customer’s customers. FSFE’s payment provider canceled them w/out notice for not sharing info about donors (yes, in a GDPR region) (fsfe.org)
submitted 5 days ago* (last edited 5 days ago) by activistPnk@slrpnk.net to c/gdpr@sopuli.xyz
4 comments fedilink hide all child comments
top 4 comments
sorted by: hot top controversial new old
[–] voxel@feddit.uk 4 points 5 days ago (1 children)

Just because something happens in a GDPR region, doesn't mean it is legal. I see GDPR violations everyday.

[–] activistPnk@slrpnk.net 1 points 3 days ago (1 children)

Indeed that was why I called it out. To stress what shit is happening despite the GDPR. Violations are rampant and enforcement is sparse.

[–] voxel@feddit.uk 1 points 3 days ago (1 children)

You have the right to file a complaint to a applicable data protection authority.

[–] activistPnk@slrpnk.net 1 points 2 days ago* (last edited 2 days ago)

Data subjects have a right to complain under art.77 to the extent their own data is involved. But I am not a data subject in this case.

I could still complain, but it would not have the force of art.77. It would basically be a request that the DPA voluntarily investigate in an “ex officio” capacity -- on the DPAs own initiative (if they care to do so). I’ve done that before and the DPA simply ignored the complaint. I did not even get an acknowledgement.