5 ms·

you can download them, there's just no way to import them into your new account.

by ruined 4y ago

EMIRELADERO 4y ago
GDPR has data portability rights that include the right to ask the data controller to transmit your data to another, if "technically feasible".
- jeremyjh 4y ago
  Exporting a json file is certainly transmitting the data.
  - EMIRELADERO 4y ago
    That's a separate right. Article 20, Section 1 states: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided[...] Separately, Article 2 states: In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
    - Messier43 4y ago
      Currently it's not technically feasible: https://github.com/mastodon/mastodon/issues/12423 https://github.com/mastodon/mastodon/issues/12423
    - Linosaurus 4y ago
      None of those say that the destination server is forced to import anything. This part specifically mentions the controller you originally gave data to, but says nothing about whom you now want to import it to: > without hindrance from the controller to which the personal data have been provided
- Gigachad 4y ago
  It's one sided. They only have to allow exporting. Either via a data dump file or a direct transfer to another service. It's implied that the importing side will make this work on their own since they only benefit from allowing data imports to onboard new customers while the exporter is losing their customer.
  - EMIRELADERO 4y ago
    There is no "either". The user has to have the ability to do both. See my reply to Jeremy's comment.
- mariusor 4y ago
  GDPR's tool for punishing transgressions is fines: > For especially severe violations, listed in Art. 83(5) GDPR, the fine framework can be up to 20 million euros, or in the case of an undertaking, up to 4 % of their total global turnover of the preceding fiscal year, whichever is higher. > “the concept of an undertaking encompasses every entity engaged in an economic activity, regardless of the legal status of the entity or the way in which it is financed” These services have no economic activity whatsoever, or if they do it's in the forms of donations to keep the lights on. Who do you propose that the GDPR hammer strikes?

you can download them, there's just no way to import them into your new account.

by ruined 4y ago

you can download them, there's just no way to import them into your new account.

GDPR has data portability rights that include the right to ask the data controller to transmit your data to another, if "technically feasible".

jeremyjh 4y ago
Exporting a json file is certainly transmitting the data.
- EMIRELADERO 4y ago
  That's a separate right. Article 20, Section 1 states: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided[...] Separately, Article 2 states: In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
  - Messier43 4y ago
    Currently it's not technically feasible: https://github.com/mastodon/mastodon/issues/12423 https://github.com/mastodon/mastodon/issues/12423
  - Linosaurus 4y ago
    None of those say that the destination server is forced to import anything. This part specifically mentions the controller you originally gave data to, but says nothing about whom you now want to import it to: > without hindrance from the controller to which the personal data have been provided
Gigachad 4y ago
It's one sided. They only have to allow exporting. Either via a data dump file or a direct transfer to another service. It's implied that the importing side will make this work on their own since they only benefit from allowing data imports to onboard new customers while the exporter is losing their customer.
- EMIRELADERO 4y ago
  There is no "either". The user has to have the ability to do both. See my reply to Jeremy's comment.
mariusor 4y ago
GDPR's tool for punishing transgressions is fines: > For especially severe violations, listed in Art. 83(5) GDPR, the fine framework can be up to 20 million euros, or in the case of an undertaking, up to 4 % of their total global turnover of the preceding fiscal year, whichever is higher. > “the concept of an undertaking encompasses every entity engaged in an economic activity, regardless of the legal status of the entity or the way in which it is financed” These services have no economic activity whatsoever, or if they do it's in the forms of donations to keep the lights on. Who do you propose that the GDPR hammer strikes?