Mad respect for you, thanks for the update!
AlteredStateBlob
joined 1 year ago
Contact the DPA of your EU home country. It doesn't matter of you live elsewhere.
Even non EU citizens can make complaints. It just won't lead to remediation for their dircet issues, if one is sought through the DPA
It depends on where you live. But reddits EU offices are in the Netherlands, so you could file a complaint with them. Usually it should be as simple as searching for "gdpr supervisory agency [my state/country]" to find their website and complaint form.
It's a death cult.
Especially US companies usually just do things and are willing to engage in lenghty legal battles after the fact.they are very, very litigous.
Another issue to consider is that the GPDR is held vague on purpose since it applies to your neighborhood yoga studio as well as Google or reddit. Entirely different use cases. So there is a lot of room for interpretation.
Looking at the conduct just within Europe, yes, I think it is possible GDPR considerations were either ignored or downplayed to the point of irrelevance. There was a recent study by noyb.eu which showed that DPOs are still often pressured to make recommendations that do not align with GDPR principles.
Either way, the DPAs will have to decide if the complaint has merit. Given new technologies are specifically mentioned im the GDPR, I am at least very curious to see how it turns out.
It doesn't matter what it tells me. Personal data is clearly defined under GDPR as data that can be used to identify a person. It is irrelevant if you or I can do it with publicly available data, reddit has the data and that is enough to qualify it as such.
A DPA might absolutely disagree with my reading of the situation. I would be surprised, if a DPA considered usernames as non personal identifable information and know of no such ruling.
Ah, alright. Didn't check old.reddit
You have to give one, while signing up (just checked); unless you go through apple or google ID services. Either way, they still log your IP and other meta data not to mention your username does exist.
I'd argue it is, but, that's where the judgement of the DPAs comes in. It's definitely possible that some, if not all of them, reject this as "it's fine". But unless eyes are being put on it, any shenanigans will simply occur.
I don't know how it might go, but giving it a try is basically free.
Also, I appreciate your consideration of my perspective!
It is not clear if reddit has already engaged in this with Google, or if it is something that's only starting. However, as outlined in my post, they might have to consult with a DPA before engaging in this anyway, which I doubt they have done. So, no, DPAs are absolutely the right place to make that complaint.
Even if they hadn't started yet, might as well get their eyes on it, and force them to do it right from the get go (which they cannot do, as it currently stands).
It is not enough, no. The LLM might reveal training data, showing the original text and that is a simple Google search with site:reddit.com away from identifing the user. It's trivial and thus not anonymized.
Usually it's the same users who always come into discussions in bad faith and simply argue against whatever is being said. There are a few people I have had blocked for months now and my experience as improved a lot.
My only gripe is, that I can still see them in my threads in the unread messages of kbin, and that kinda sucks.
But since the community at large is fairly small, it's not super difficult to eliminate the constant gripers and argumentative folks from your experience.