3 ms·
>Also what happens if it turns out one of those repos had personal information in it and the subject makes a GDPR right-to-forget demand? Are they going to drag
by throwaway368765 6y ago
>Also what happens if it turns out one of those repos had personal information in it and the subject makes a GDPR right-to-forget demand? Are they going to drag it out and purge that bit of tape?
I believe GDPR has exemptions for archives ([0] section 28) so that's less of a concern for them I imagine. I recognise what you're saying, but I think anyone _very_ opposed would have a difficult time in court arguing GitHub should remove their work/name/etc. My (very loose) understanding of the law is that they would have to demonstrate some kind of loss.
That being said, GitHub could just have sent a notification email with very little effort. Maybe 'no harm, no foul' applies here?
[0] https://www.legislation.gov.uk/ukpga/2018/12/schedule/2/part/6/enacted https://www.legislation.gov.uk/ukpga/2018/12/schedule/2/part...