Hacker News Reader

Please don't! GDPR letters are FUD. The only authority that can enforce GDPR is the DPA of your country or your user's country. And then after thoroughly investigation the DPA can implement different measures and the fines are just for the stronger actors and breaks.

View on HN

No, the letters are - unfortunately - not FUD, they are legitimate DSARs and the letter has been carefully worded to give cover to the writer.

https://ico.org.uk/for-organisations/guide-to-the-general-da...

Is a good starting point. Yes, you can refuse a request if it does not qualify but in this case there is more than enough meat to take it serious.

Please, take a look at the user's rights:

https://ec.europa.eu/info/law/law-topic/data-protection/refo...

Please be more specific in your refutation. In following the link you've provided I see nothing to support your assertions, and it appears to support jacquesm.

He’s all over this thread with this garbage

Reply on news.ycombinator.com