4 ms·
None of what you mentioned sounds particularly onerous. Just don't ask for personal data and advise users not to post it. Let people delete their own posts and
by bloak 5y ago
None of what you mentioned sounds particularly onerous. Just don't ask for personal data and advise users not to post it. Let people delete their own posts and have a way for an administrator to delete a post if it might in some way be illegal (probably nothing to do with GDPR), and if people want to download stuff, tell them to use "wget --mirror". On othe other hand, dealing with spammers and eccentric/mad troublemakers could be a real headache. The frequency of such people probably depends on the topic of your forum.
- Tabular-Iceberg 5y agoThe data protection requirements themselves are not onerous at all. But the path to compliance is scary and complicated to anyone who isn’t a lawyer or is retaining one. What’s needed is a “fast track” compliance package for individuals, small businesses and online communities. Something like a cookie cutter privacy policy along with a rule book for simple applications without trackers and where all PII is personally and transparently entered, edited and extracted by the data subjects themselves, like in your example. That’s good enough for most applications, and great for entrepreneurs to not have to think about GDPR until they have enough momentum to warrant getting lawyers.