There are now some U.S. state laws that impose requirements for notice and consent.
reply> HN blatantly doesn't comply
replyWhat about HN doesn't comply with GDPR? It does not seem to have tracking cookies.
Apparently they won't delete your old comments if you ask them to.
replyI'm someone who goes to somewhat absurd lengths to avoid tracking, but HN's policy doesn't bother me because I know the data exists elsewhere and deleting it here won't make a jot of difference to that.
I'm not entirely sure they'd need to comply. The question is what the purpose of the data being collected was, but seems to me that if you emphasise the whole idea that this is a conversation (which HN does in several ways) then actually "We don't delete comments" is defensible.
replyIf I'm reading a thread about a problem I'm having in a video game on Reddit and it goes "This is very frustrating because I can't get a rabbit to teleport", then a reply which is [deleted] and then "Oh! Thanks so much, I'd never have figured that out" I'm in exactly the same place as the original poster, but now with the additional agony of knowing that there was a correct solution and that it's hard to figure out what it is - ugh.
Right to be forgotten is part of GDPR even though most people only think of cookie banners. There's no one-click export, either.
replyLike most of the GDPR "Right to be forgotten" is not an absolute right. As you'll quickly discover when you insist that the bank needs to "forget" that you owe them a lot of money, there are plenty of legitimate reasons they can decline to "forget" you despite your invocation of a "right".
replyThat's cute. Your records are yours. Barring some agreement to the contrary, I have no right to mess with them or inspect them, even if they contain information about me.
replyThat's an interesting opinion, but EU law says the opposite.
replyEU law only matters to those subject to it.
replyWhich is why I questioned American websites complying with GDPR, and pointed out that HN doesn't feel any need to.
reply