• lemmesay@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    33
    arrow-down
    1
    ·
    11 months ago

    it’s almost always a soft delete, that is, change active field in database to false, coupled with their terms of service that state vaguely how they start the deletion process which could take months and how they may still keep certain data for legitimate purposes.

    • HeyJoe@lemmy.world
      link
      fedilink
      English
      arrow-up
      24
      ·
      11 months ago

      And this is why I wish we adopted GDPR more… if they are compliant, then they have to remove all data held when requested. Too bad the US will never care that much to respect individuals’ data like that.

      • hi_its_me@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        11 months ago

        Exactly. I made a GDPR request for deletion. They can get in big trouble if they are soft deleting.

        • Rodeo@lemmy.ca
          link
          fedilink
          English
          arrow-up
          1
          ·
          11 months ago

          Have they ever been audited?

          How does the legal authority work with GDPR if the company’s physical and financial operations are entirely within the US? Would the GDPR even be allowed to audit them without their consent?

          • hi_its_me@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            11 months ago

            No idea if they’ve been audited. GDPR doesn’t require it. My understanding is that American companies doing any business or having any users in the EU need to be GDPR compliant for those users. I don’t think that’s been challenged in any courts yet.