this post was submitted on 25 Jun 2023
984 points (99.6% liked)

Reddit

13638 readers
2 users here now

founded 5 years ago
MODERATORS
norz@lemmy.ml
984
/r/pics employing weaponised bureaucracy in the fight against Reddit (i.imgur.com)
submitted 1 year ago* (last edited 1 year ago) by dan@lemm.ee to c/reddit@lemmy.ml
122 comments fedilink hide all child comments
 

https://www.reddit.com/settings/data-request

redditdatarequests@reddit.com

Having worked at a company that had a massive influx of GDPR requests we weren’t prepared for, this one could actually cause them some trouble if Reddit don’t have that process properly automated.

(page 2) 50 comments
sorted by: hot top controversial new old
[–] Saxifraga@beehaw.org 10 points 1 year ago (1 children)

You could consider making a data request first and after they respond, make a deletion request when you’d like your account removed. This will use even more resources.

If they do not respond to either the data request or deletion request (or do not fulfil these requests fully), you can make a complaint with your local data protection office or the one Reddit is based in (maybe Ireland?). Make sure you invoke GDPR using the correct language for your request.

Here’s a template letter of how to do so under GDPR. You must request your data or the deletion of you data using the correct legal framework (quoting the correct legislation) and these templates make this easy. Plus they cover more types of data than just your posts and comments.

https://www.datarequests.org/sample-letters/

[–] dan@lemm.ee 6 points 1 year ago (1 children)

Whenever I do this with other companies I do a SAR to get a copy of the data, then a RTBF request to get the data removed, then another SAR to see what they retained.

A significant number say they delete your data and then happily send it back to you a coupla months later when you make an SAR. The ICO loves those ones.

[–] Saxifraga@beehaw.org 2 points 1 year ago* (last edited 1 year ago)

That's a great idea, I'll do this too.

Having also worked somewhere that was under GDPR, weaponised bureaucracy like this can really be used to consume staff resources.

Edit: it looks like Reddit have changed their data request form. To make a full GDPR request, with the additional data in the template, you'll need to email your request to Reddit (redditdatarequests@reddit.com).

You can not only request your data, but also request information regarding how your data is processed and also about psudo-anonymised data. These are much harder to automate a response to.

See here for examples from the template:

  1. the purposes of the processing;
  2. the categories of personal data concerned;
  3. the recipients or categories of recipient to whom the personal data have been or will be disclosed;
  4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  5. where the personal data are not collected from the data subject, any available information as to their source;
  6. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for me.
[–] mac12m99@feddit.it 10 points 1 year ago* (last edited 1 year ago) (1 children)

I've done this, but how much time is needed to automate it? If it's 1-2 week they can just automate and then process all the past and future requests in buk

[–] Martineski@lemmy.fmhy.ml 3 points 1 year ago

Still means that they have a problem to resolve which is a w

[–] Cheb@lemmy.world 9 points 1 year ago

Done

[–] solstice@lemmy.world 9 points 1 year ago

I was a redditor for 15 fucking years before they suspended all of my accounts after a mod permabanned me from /politics and I accidentally posted from another account weeks later.

I posted A LOT over those years, from a ton of various accounts. (One of my biggest fears was getting doxxed so I had a bunch of burners and accounts for specific niche interests and such.)

Just requested full data history for all ~10 of my accounts. Fuck reddit.

[–] smileygav@lemmy.ml 8 points 1 year ago

Request submitted

[–] smartwater0897@lemmy.ml 8 points 1 year ago

Done!

[–] 0x48756773@sh.itjust.works 7 points 1 year ago

Awesome idea! Just threw in my request.

[–] fleabomber@lemm.ee 6 points 1 year ago

Kk going hard.

[–] orsetto@beehaw.org 6 points 1 year ago (1 children)

Well my account is not that old, but i did my part.

[–] DrunkenPirate@feddit.de 3 points 1 year ago

Done as well

[–] macrocephalic@lemmy.fmhy.ml 5 points 1 year ago

Done and done!

[–] lol@sh.itjust.works 5 points 1 year ago

I did it on all my alts lol.

[–] ekZeno@lemmy.ca 4 points 1 year ago* (last edited 1 year ago)

Quite a longer process I think. In the end the only nice thing I got from this whole mess is to discover lemmy. I also suggest everyone to check Mastodon as Twitter alternative. Fk monopolies ✊️

[–] TheDarkBanana87@lemmy.world 4 points 1 year ago (2 children)

Already nuking my account, and im not in the eu/us region

Can still participate?

[–] dan@lemm.ee 6 points 1 year ago

Yes 100%. They have an EU presence so this applies to all the data they hold about anyone.

[–] OtakuAltair@lemmy.world 2 points 1 year ago* (last edited 1 year ago)

I'm not in either and could still request it: http://www.reddit.com/settings/data-request

[–] wolfheart@lemmy.ml 3 points 1 year ago

I did my part

load more comments
view more: ‹ prev next ›