Make account GDPRing possible in the account settings

Zydrolic

gdfsgdfsgdfg wrote:
(#20)
then we add explanation

“Why can't I share (insert bad social media platform)?!” is an example that people do not bother reading guidelines.

If they don't bother, explanations do nothing.
I'll bring #3 down, since identity verification appears to have been forgotten to mention.

PPPDUD

GIitchInTheMatrix wrote:
Za-Chary wrote:
I thought GDPR is only a European law. Can those residing in the United States, for example, get GDPR'd?
It could be a “Request GDPR” button, which essentially just sends a Contact Us message, where you talk to a real ST member about it.

That is a duplicate and also means that the Scratch Team will have more work to do (not good).

PPPDUD

Bump!

PPPDUD

PPPDUD wrote:
Bump!

Zydrolic

Zydrolic wrote:
(#3)
Under GDPR, the company should use and take all reasonable measures in order to verify the identity of a data subject who requests access, in particular context of services and online identifiers.

Adding onto this because nobody is realizing
pretty sure if you accidentally let through someone in doing GDPR not in the EEA there's a fine, and an even bigger one if intentional.

ajskateboarder

PPPDUD wrote:
baleeted wrote:
there is already an option to delete your account, and on top an additional option to delete all of your projects afterwards
That doesn't really delete your account. It just hides your content permanently, rather than actually deleting it.

How do you know this? Scratch probably isn't like Facebook

Last edited by ajskateboarder (Oct. 20, 2023 20:37:35)

Zydrolic

ajskateboarder wrote:
(#26)
PPPDUD wrote:
baleeted wrote:
there is already an option to delete your account, and on top an additional option to delete all of your projects afterwards
That doesn't really delete your account. It just hides your content permanently, rather than actually deleting it.
How do you know this? Scratch probably isn't like Facebook

I can verify, actually.
But I don't think I should link my older cringe account that I deleted for a reason.

-Expo

It would probably be a good idea outside of the EU. Especially here in South America

glitcX

dhuls wrote:
Za-Chary wrote:
(#2)
I thought GDPR is only a European law. Can those residing in the United States, for example, get GDPR'd?
California has a similar law to the GDPR, known as the California Consumer Privacy Act, which has similar provisions of requesting the deletion of personal data and requesting that personal data. It has fines of $2,500 if one unintentionally violates it, and triple that amount if intentional. It's also probably difficult to identify if someone is a resident of California, so the ST would probably still have to apply the law to everyone.

I still think this should require email verification, because making it easier to permanently delete your account with absolutely no chance of getting it back is a recipe for disaster on a website used mostly by children.

so can i get one of my alts ccpa'd?
[/offtopic]

GIitchInTheMatrix

ajskateboarder wrote:
PPPDUD wrote:
baleeted wrote:
there is already an option to delete your account, and on top an additional option to delete all of your projects afterwards
That doesn't really delete your account. It just hides your content permanently, rather than actually deleting it.
How do you know this? Scratch probably isn't like Facebook

https://scratch-mit-edu.ezproxyberklee.flo.org/users/SAVVYSCLUTTER/followers

PPPDUD

Bump!

Zydrolic

This'd still just bring up issues because if you let through someone on accident that isnt in the EEA, there's a fine, and a bigger one if intentional.
And making a button in the account settings is just gonna cause a bloat in tickets.

and since I actually haven't said anything with the support convention here yet
no support

PPPDUD

Zydrolic wrote:
This'd still just bring up issues because if you let through someone on accident that isnt in the EEA, there's a fine, and a bigger one if intentional.
And making a button in the account settings is just gonna cause a bloat in tickets.

and since I actually haven't said anything with the support convention here yet
no support

Source?

Zydrolic

PPPDUD wrote:
(#33)
Zydrolic wrote:
This'd still just bring up issues because if you let through someone on accident that isnt in the EEA, there's a fine, and a bigger one if intentional.
And making a button in the account settings is just gonna cause a bloat in tickets.

and since I actually haven't said anything with the support convention here yet
no support
Source?

Art. 83(1),(2)&(4a) (GDPR.)

PPPDUD

Zydrolic wrote:
PPPDUD wrote:
(#33)
Zydrolic wrote:
This'd still just bring up issues because if you let through someone on accident that isnt in the EEA, there's a fine, and a bigger one if intentional.
And making a button in the account settings is just gonna cause a bloat in tickets.

and since I actually haven't said anything with the support convention here yet
no support
Source?
Art. 83(1),(2)&(4a) (GDPR.)

How and why would anybody enforce that?? Also, the Scratch Foundation is in Massachusetts, not the European Economic Alliance.

Zydrolic

PPPDUD wrote:
(#35)
How and why would anybody enforce that?? Also, the Scratch Foundation is in Massachusetts, not the European Economic Alliance.

Processing or collecting data of EU residents = It doesn't matter whereever on earth the business/etc are.
Required to comply, regardless if individual, company, or business.
And even regardless of whether the data resides in or out of the EU.

EDIT: Also, not the Economic Alliance;
I'm using EEA as an abbrev for European Economic Area…

Last edited by Zydrolic (Oct. 22, 2023 20:09:50)

EngineerRunner

Zydrolic wrote:
Zydrolic wrote:
(#3)
Under GDPR, the company should use and take all reasonable measures in order to verify the identity of a data subject who requests access, in particular context of services and online identifiers.
Adding onto this because nobody is realizing
pretty sure if you accidentally let through someone in doing GDPR not in the EEA there's a fine, and an even bigger one if intentional.

i've never heard that before. i don't think that's right, as i'm pretty sure the EU doesn't have jurisdiction over what the company lets people who aren't in the EEA do. also, the UK and California have a similar law (with the UK's one even being called the GDPR), so it wouldn't make much sense for the EU to punish them for letting anybody submit a GDPR request.

amogus1123

i never said anything on this topic mainly because the uk left the eu
so i have nothing that i can really say about this
about the main topic of this uh, maybe? could be used for hiding awful things though

Last edited by amogus1123 (Oct. 23, 2023 08:41:21)

PPPDUD

PPPDUD wrote:
Bump!

amogus1123

PPPDUD wrote:
PPPDUD wrote:
Bump!

you bumped after 7 hours

(could've waited longer?)

Discuss Scratch