Just as an example, this is Reddit's cookie notification compliance - so something similar to this should be presented so that I know what the cookies are used for in plain language and can accept or reject any non-essential cookies. I should also be able to give or withdraw my consent at a later time.
I'm no expert so hopefully someone will be able to chip in. I know when I have dealt with GDPR stuff, there has been quite a lot of conflicting opinions!
Even if it is not required to get consent for that, I think there is also a requirement around explaining to the user what they do and why they are necessary.
In the UK a screen name is an identifier. See ICO here. I am in the UK. Therefore combined with other data being collected, e.g. IP. Lemmy and instances I interact with are handling personal data. If it is transferred between instances when I search or view content from one instance to another, there are GDPR implications.
This is just at a really high level. Take for example https://lemdro.id. I am in the UK.
I do not get cookie information / consent
How do I make a SAR request, it isn't stated
What is their data retention and privacy policy, it isn't stated
How do I make a data sharing request as a member of law enforcement or government
How is data processed if I am under 16/13
Is data transferred from an EU to non-EU server if I search their content from another instance? Are the correct controls and risk assessments in place
If I delete my .id account under right to be forgotten, how is my request propagated between other instances to ensure my data isn't retained somewhere on another instance which has pulled the data
If I use an account from another instance and post an image on .id, and then delete my account, is the image I posted deleted from their server and backups etc
GDPR is very serious and an absolute minefield. I am pretty sure Lemmy and individual instances are not compliant, and I am not sure they can be fully - it may have to be on a best-endeavours basis. Be interesting to see how that holds up under a challenge.
It's definitely a complex issue - and totally agree, mergers are not the same.
It does feel disingenuous for you to dodge a yes or no question.
I'm not trying to be rude, but setting up a new instance without clear (edit - server level) policies and rules and no GDPR compliance and then expecting people to move over rather than choose to move doesn't look great.
If you want everyone over to your instance because of whatever reasons you should be very transparent why and have it set up appropriately before that move starts - and be plain that you don't want competing communities.
If you are happy to have multiple communities, it's easy just to say you support that.
It's a great offer - there should be no issue with re-opening the existing community here under new mods, then people are free to go to whichever Android community they feel is a better home.
There are so many on itch - I have my games on there! The indie TTRPG scene is thriving and bigger than ever - I play mostly online, and Discord is a huge part of that nowadays. Very active communities!
Lemmy is awesome - I'm really enjoying it. Like the early days of Digg, even Fark, etc. Quality stuff happening!
Performance has improved, but many niche communities need more growth and engagement.
Duplicate communities across Lemmy instances are a bit of a nightmare in some ways - although by design, and also have advantages.
r/all on Reddit looks pretty different now, unless that's just my perception. A lot of subs I'd never seen, more low quality stuff with less engagement.
I think this is to be expected - some instances have downvotes disabled but that doesn't seem to be the rule of thumb.
There are quite a few questions about data retention, usage, retrieval, compliance and how it is shared which will need to be addressed as the platform grows.
I think it remains to be seen. The rapid growth of .world has been the first real production test of how the platform handles more users and content. Amazing work by the team, but there are a lot of rough edges and it is a new platform with a lot of unknowns.
The things that spring to mind for me are:
Sign up needs to be streamlined and made more simple, and find a way to not overload individual servers without just randomly assigning people to instances.
Live defects, bugs and things feeling rough around the edges.
Back-end build and scaling.
Duplicate communities across instances.
Account migration between instances.
Data retention past x period - how will various instances handle this with a large number of users.
GDPR and data request compliance from individuals, governments, etc.
Funding the costs and resources associated with rapid, large growth. How do people know what their money is going to fund? I think there needs to be real transparency, public roadmaps and backlogs and understand how / if admins are accountable.
How the platform and users will respond to large corporations or even individual admins on instances adding adverts, using / selling user data in ways the userbase do not expect.
How is that a breach of GDPR?