GDPR legislation

(I'll move this thread to SS since it's relevant to SP.)

Big deal, yes, mostly due to misinformation and heaps of scaremongering, but now that we're past the 25th and the sun still rises, it's getting better.

I believe we are compliant, we've been doing mostly everything required by the GDPR so far anyway so no major changes needed, though the next version of our forum software will have some additional GDPR-specific features, but most of them are highly unlikely to ever need to be used.

I've updated our privacy policy, so anyone interested can check it out. From a forum user's POV the most important GDPR change is the requirement for website operators to remove any personally identifiable information collected from/posted by a user at their request, including the deletion of their account. Some sites have completely ignored such requests in the past, but we've always done it when requested so it's nothing new in that respect.

I'd just like to emphasize that there is no requirement for the forum owners to delete any posts/threads except those (if any) that contain a user's personally identifiable information. Basically, when requested, we'll be required to delete or otherwise anonymize user accounts, but the posts you make get to stay as long as that is the site policy. In our case, it is, because deleting even a single user's posts from a thread can effectively destroy it and I have no desire to do that when there's no good reason for it.

Also, technically everything GDPR-related only applies to EU citizens, but we've been treating everyone the same before and will continue doing so in the future as well.

 

It could be either forum, really, depending on the discussion. We've touched upon the GDPR a bit in the RBT too.