Reddit recently removed years of chat and message archives from users’ accounts without warning as part of an infrastructure upgrade. Many Redditors were upset to discover that their chat histories from before January 2023 were no longer accessible. Reddit claims they only migrated data from 2023 forward during the transition to the new chat infrastructure. Some users were able to retrieve some of their old messages by requesting their Reddit data, though others reported that not all messages were recovered. Along with this change, Reddit has recently made other unpopular decisions like ending Reddit Gold, showing a lack of communication and consideration for users’ sentimental attachment to their online data.
Deletion of personal data without consent or lawful base is also a violation of the GDPR.
Do you have a citation for this? It conflicts with what I know about GDPR.
Mostly GDPR encourages companies to delete personal data they were holding once they no longer have a legitimate use for it. There is a rule where you can demand your data be frozen if so that misuse cam be investigated and in that case you’d be right. But in general companies can and should delete personal data.
That is true, in the GDPR, processing is defined as follows(Art 4): “‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;” And a data beach is defined as follows: “‘personal data breach’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;” And article 5 says: “processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).”
There is still legitimate use, as you still have the account and an accidental or unlawful deletion is a data breach.