It should take 30 days for your data to be scrapped after an account deletion: https://github.com/LemmyNet/lemmy/issues/2977
Lemmy Support
Support / questions about Lemmy.
Thank you!
This isn’t easy to do yourself: thing is, the way you identified yourself as being “you”, an asymmetric cryptographic key pair associated with your account, got deleted when you removed your account.
If your posts and comments don’t contain any personally identifiable information (that is: no-one can tell it was you who made them) I’d just let it be. Otherwise this is going to be difficult.
Addenum:
Even my profile picture and banner got reinstated.
Do I request to GDPR my data?
You can try, but the reality is all of your activity gets replicated to every instance. You should assume that it's permanently out there.
GDPR doesn't apply to any entity without EU prescense. There's still gonna be an instance somewhere out there that has your posts/comments. You should assume any information you post online to be there forever.
You are wrong. "Though it was drafted and passed by the European Union (EU), it imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU." From https://gdpr.eu/what-is-gdpr/
How are they gonna enforce it if you dont live in the EU and your server isn't in the EU? Interpol? ~~Well the US isn't in Interpol~~, (edit: okay the US is in Interpol, I got it confused with ICC, but my point still stands) and I doubt the US would extradite for something simple like violating the GDPR. There is also Russia or China potentially running a spying instance to gather up any data they can. Your posts/comments are public forever.
This I don't know. They can always send fines, but cannot force actors to pay them or to comply. I guess they can block the service in the EU through the ISPs, and arrest people if they ever set foot in the EU?
There was a discussion about GDPR on mastodon github, and they seemed to conclude that GDPR does not apply to natural persons, which includes most instance admins who aren't corporations or any entities, but just random people not profiting from anything.
Not sure how valid, since they aren't lawyers.
That doesn't sound right. But then again, like someone else already said: If they aren't in the EU and don't have dealings with them (because they aren't large companies), who is going to enforce it?
I think most likely the website (instance) gets blocked in EU. Maybe they get a fine that they can't force them to pay until they step foot into EU. I highly highly doubt they'd put the effort of extradition