Exactly.

The 3-2-1 backup strategy: “Three copies are made of the data to be protected, the copies are stored on two different types of storage media and one copy of the data is sent off site.”

I’m not even an Apple user but somehow I still feel like Apple is one of the very last companies where privacy and the security of your data is more worth than a dime.

If you don’t want other people to see your posts and comments you shouldn’t post and comment on a public website. Duh.

Did you read the article?

Then it should be the responsibility of the EU people to avoid joining the fediverse.

The instances are providing their services in the EU, so it’s legally up to them to comply with the GDPR.

From your perspective, what should be the way out?

Honestly, no idea. I’m not even sure if Lemmy in its current shape violates the GDPR in the first place, but if I were the admin of a large feddit instance in the EU I would make sure to get advise from a GDPR consultant.

This whole thread is full of interpretations and gut feelings. Literally no one here backs up their claims with any kind of evidence.

If what you say is true, then… Email is illegal in the EU. EMAIL.

No, but there are actually certain things you need to take into consideration when it comes to GDPR and email.

What the GDPR says:

Data erasure is a large part of the GDPR. It is one of the six data protection principles: Article 5(e) states that personal data can be stored for “no longer than is necessary for the purposes for which the personal data are processed.” Data erasure is also one of the personal rights protected by the GDPR in Article 17, the famous “right to be forgotten.” “The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay.” There are some exceptions to this latter requirement, such as the public interest. But generally speaking, you have an obligation to erase personal data you no longer need.

What it means for email: Many of us never delete emails. There are plenty of good reasons: We may need to refer to them someday as a record of our activities or even for possible litigation. But the more data you keep, the greater your liability if there’s a data breach. Moreover, the erasure of unneeded personal data is now required under European law. Because of the GDPR, you should periodically review your organization’s email retention policy with the goal of reducing the amount of data your employees store in their mailboxes. The regulation requires you to be able to show that you have a policy in place that balances your legitimate business interests against your data protection obligations under the GDPR.

https://gdpr.eu/email-encryption/

I still don’t see a reason why Lemmy shouldn’t be affected by the GDPR and why it’s probably not compliant in its current state.

You’re right. If someone from feddit.de subscribes to a lemmy.world community, the entire content of that community is going to be copied to the feddit.de server and that’s the exact issue OP is referring to.

You are indeed wrong. The email and IP addresses and passwords for example don’t get copied.

I never said that IP addresses and passwords were getting copied.

The thing that no one seems to understand here is that all my posts, comments and votes and everything are my personal data. My data can be public, but it’s still MY data and I have the right to decide what happens with it and if it should stay public. That’s what the GDPR says and that’s exactly what OP is referring to.

ITT: People that don’t undertand the difference between “personal” and “private”. My posts and comments are my personal data, even if they’re public, and I have the right to decide what happens with it and if it should stay public. That’s what the GDPR says and that’s exactly what OP is referring to.

You’re confusing “private” with “personal”. My data can be public, but it’s still MY data and I have the right to decide what happens with it and if it should stay public. That’s what the GDPR says and that’s exactly what OP is referring to.

But when a lemmy.world user subscribes to a feddit.de community, the entire community will be copied to the lemmy.world server, or am I wrong?

Maybe not IP addresses, but every post and comment you make is your personal data.