Providing the service is selling groceries, that doesn’t require a birth date.

So it’s not possible to sneak it under performance of contract. Only Legitimate Interest or Consent could be valid, and you can oppose/retract.

But good readng, please provide our findings, that will save me a reading 😅

What data controller is that?

Very few of them have a valid ground to process your birh date. Do they need it to provide you the service? No? Then they fail the data minimization requirement.

and refusing access right on the ground of the birth day, which they should not have in the first place, is the cherry on the cake.

Send them a letter to tell thel that you are ready to submit a complaint to your regulator (or the lead regulatior), but that you are ready to compromize to save hassle to everybody. A few thousands are always welcome.

But again, this is valid only if the controller have no ground to process birth date. If it provide adult stuff, or legal benefits, etc. it’s a different story.

Article 3 GDPR is straightforward, gdpr will apply.

The real question is how any kind of authority could enforce it ? Almost no chance that any law enforcement/regulator will bother a single-user instance purely on the ground of gdpr…

I’m not so sure about the GDPR status for the Fediverse, I don’t think there’s the law is prepared for “Jerry runs this for people, just for fun”. It’s very much “official organisation” or “money grabbing business” oriented. Someone should fund an actual lawyer to look into this and lay down the real requirements.

I’m working in the gdpr compiance field ;) Using a personnal device to monitor public space doesn’t fall under the household exception, this solution even pre-dates the GDPR (https://curia.europa.eu/jcms/upload/docs/application/pdf/2014-12/cp140175en.pdf).

(the case-law is about camera fixed on a private house, but the logic easily translates in a private server grabbing public data).

but when legal compliance comes up, everybody just sticks their fingers in their ears and pretends not to hear you.

Just as you did ^^

No, Lemmy servers are not exempt from GDPR compliance. The household exemption (you are not subject to gdpr for private activities) only applies for purely personnal activities. As soon as a service is offered to someone else, the exemption is no more applicable.

That’s one of the drawback about open-source projects, they are designed to fulfill a need (persistent storage & decentralised communication for Lemmy), and no one give a f*ck about legalities.

Damn… I’m a Linux user that basically hates the MS way of life, but I must admit that they are taking AI seriously AND share their tools. So kudos, please continue !

I shamelessly reused the AI assesment template at work and this RIT will be pushed to some colleagues.

2 main reasons in my view:

• windows is the de facto standard for desktop ans users management. So each corp has at least one guy used to the interface to dofirst-level debug
• windows comes with support, not linux. So corps don’t want to employe one Linux admin “just in case”. That’s the main reason I keep hearing from sysadmins I know

Germany is shit for Internet connections…

Expensive and slow…

It’s possible, I’ve been tricked last year by a similar attack (the sneakiest attack possible to target privacy people, imho).

I praise IT Security for putting so many safeguards, sandboxes and verifications!

It misses the most important information: why.

The CNIL (French privacy regulator) slapped Discord in October last year because they never deleted accounts (hi GDPR).

Since then, all tech companies are hurriedly designing a plan to mass delete inactive accounts.

TL;DR Both are crap and don’t respect your choice when opting out. iOs is even (a tiny bit) worse than Android, as info of nearby devices are being also sent.

Tried the quiz. First question: an app request access to data, what do you do?

• allow all
• allow nothing and uninstall
• all strictly what is necessary (e.g. location for Uber)

Boy, first question and you already fuck up… Never heard about the concept of address?

You know that NAS can go in sleep mode, right? And wake up only when you try to activate them.

But what is the use-case? Only make your holiday films available to a media center? Or do you plan to also use it as a storage for other devices?

In the first case a sbc can do the trick (however can struggle if you share 4k). But I would definitely look into “real” NAS (Synology, qnas, etc.) before using a sbc.

I don’t expose my dns, because I don’t bother. I’m using Android phone, so I accept my phone is not private.

But a VPN could be a solution to get in touch with your dns.

Best advice. Set your own dns resolver, it’s easy.