Having worked at a company that had a massive influx of GDPR requests we weren’t prepared for, this one could actually cause them some trouble if Reddit don’t have that process properly automated.
You could consider making a data request first and after they respond, make a deletion request when you’d like your account removed. This will use even more resources.
If they do not respond to either the data request or deletion request (or do not fulfil these requests fully), you can make a complaint with your local data protection office or the one Reddit is based in (maybe Ireland?). Make sure you invoke GDPR using the correct language for your request.
Here’s a template letter of how to do so under GDPR. You must request your data or the deletion of you data using the correct legal framework (quoting the correct legislation) and these templates make this easy. Plus they cover more types of data than just your posts and comments.
This is the same for me! “A message will be sent to your reddit inbox” complete silence. Though the submission message said it could take 30 days or something.
The GDPR states, that request must be completed within a month. In case you’re from Europe, you could report reddit to your local authorities if they don’t respond within that time frame. A single report won’t probably cause a reaction. But several reports from several individuals on the other hand…
Haha that’s worth a go - there is basically zero chance of them responding to that properly.
Wow can you imagine how much carnage a letter based subject access request onslaught could be? There’s basically no way around employing people to open letters and then do a bunch of data entry just so they can email you and say “hey fill in this form”.
Edit: Could they even email you? Would they have to respond by post?
Yeah same. They might be holding back until the last minute deliberately in some 4D chess move, but like you I think it’s more likely some poor soul is preparing them manually.
Add comment