@blaine GDPR request would get access and be a massive PITA for them to serve too.
Top-level
8 comments
@blaine @coldclimate TBH I struggle to see how Threads is compliant with GDPR's principles incl migrating the social graph from one service to another (I assume they would argue it is a 'compatible' purpose?) so providing an API for others to do the same would also be incompatible with GDPR. I think?? @derivadow @blaine @coldclimate Not if you're accessing it yourself! GDPR mostly just requires consent and legitimate purpose. @derivadow @blaine @coldclimate Hmmm. I am allowed to download a copy of my own address book (in fact isn't this a GDPR requirement itself?). Whether it's legal to accept an upload to a different service might depend on how that services uses the data (IANAL) @moh_kohn @blaine @coldclimate ah yes I see what you mean. I was thinking about the upload bit (or meta just using the data in another product). The Digital Markets Act should force them in that direction, which is probably one of the reason they aren't launching P92 in the EU |
@coldclimate yeah, it does, but not with useful timelines nor format for use by open alternatives. GDPR should specify that access needs to be as fast and specific as internal tools have access.