https://www.reddit.com/settings/data-request
Having worked at a company that had a massive influx of GDPR requests we weren’t prepared for, this one could actually cause them some trouble if Reddit don’t have that process properly automated.
They do not have it automated. I put in a request 2 weeks ago and still haven’t heard back.
CCPA and GDPR lawyers
Yeah same. They might be holding back until the last minute deliberately in some 4D chess move, but like you I think it’s more likely some poor soul is preparing them manually.
When can you complain about the slow response?
I would not at all be surprised if the GDPR dictates a set time period to respond backed up by fines.
the GDPR gives them 30 days to honor your request I think?
Yeah it’s 30 days, though they can push it up to 90 if they have a good reason. They have to inform you of that though.
And to be fair, a large influx of data requests is probably considered a good reason.
They still have to comply within the 90 day period. If they can’t comply in that timeframe a warning or a fine could be issued.
You can also request it again every 30 days... just saying.
They have 30 days I believe.
I did my part
Well my account is not that old, but i did my part.
Just did it for my 10yr old 150k karma account.
You could consider making a data request first and after they respond, make a deletion request when you’d like your account removed. This will use even more resources.
If they do not respond to either the data request or deletion request (or do not fulfil these requests fully), you can make a complaint with your local data protection office or the one Reddit is based in (maybe Ireland?). Make sure you invoke GDPR using the correct language for your request.
Here’s a template letter of how to do so under GDPR. You must request your data or the deletion of you data using the correct legal framework (quoting the correct legislation) and these templates make this easy. Plus they cover more types of data than just your posts and comments.
I loaded up Reddit and did my part. For those who still have Reddit accounts, upvote the original to keep it at the top
Kk
I put mine in today.
This is exactly what I did one week ago when I decided to leave Reddit. They still haven't gotten back to me
Yeah I did this not to just mess with them. I did it cause I'm leaving and I want my data.
This is the same for me! "A message will be sent to your reddit inbox" complete silence. Though the submission message said it could take 30 days or something.
The GDPR states, that request must be completed within a month. In case you're from Europe, you could report reddit to your local authorities if they don't respond within that time frame. A single report won't probably cause a reaction. But several reports from several individuals on the other hand...
Oh I wasn't aware of this. Very tempting. Now I lowkey wish they miss the deadline on one of the six accounts I requested the data for, so I can do some European style trolling.
To save everyone from having to type:
Also if you’re feeling extra cantankerous you could try emailing them directly: redditdatarequests@reddit.com
Even though they say you have to use their form, they can’t actually force you to do that: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/how-do-we-recognise-a-subject-access-request-sar/#requirements
You can also mail them a letter requesting your data and they have to honor it 🤣
Haha that’s worth a go - there is basically zero chance of them responding to that properly.
Wow can you imagine how much carnage a letter based subject access request onslaught could be? There’s basically no way around employing people to open letters and then do a bunch of data entry just so they can email you and say “hey fill in this form”.
Edit: Could they even email you? Would they have to respond by post?
So I already sent mine via their link but I have another 2 accounts. One is my first one since 2013 and one from 2016. I already mass edited all my comments but I found this. https://www.datarequests.org/blog/sample-letter-gdpr-access-request/
I would actually send a letter to them for the other accounts, need to find their address and see how much it costs since I would have to most likely send it in the US.
Edit Oh wow it's the same price and I can even request to have a confirmation of delivery, in total it would be under 5€. I will send it. Need to find out the address.
Edit 2 I think that if you send them via normal mail and don't attach an email address they have to reply to you via post at least to ask for an email address or they send everything via snail mail.
This is a great idea, please post if you find their address and stuff, that would make an amazing second wave of protest. Even if you’ve already made the request they’ve still got to open the letter, type your username to check - wouldn’t take more than a few hundred of those to cause problems.
I wonder if a letter sending device like this would work?