⚠️ GDPR + Mastodon
In my head it's personal data stored about a person. Meaning they should be able to request it. So if I for example request from mastodon.social a copy of the personal information stored about me, that should include notes people have written about me. But not who has written them.
Hoping @missiggeek will clarify if I got this wrong. 😅
⚠️ GDPR + Mastodon
Made a clarification here. I am reminded that personal notes are exempt from GDPR.
(I still have concerns about the whole vulnerability of data stored in this way, but it would appear GDPR does not generally apply in these cases)