There’s a few decent articles out there which summarise it for the layman. The general consensus is that pseudominized forum posts (username removed) do not generally qualify as personally identifiable data under the GDPR, although some individual posts where a user includes biographical data can be. That will be put to the test by some future case, I’m sure.
Obviously IP addresses and email addresses are, as are usernames. Most profile information is. But all that is super easy to handle.
GDPR covers a whole range of things. Not all of those things will apply to every organisation. For a forum, compliance is pretty easy. Once you start running a storefront etc. it becomes a bit harder. And if you’re a social network which tracks and records all sorts of stuff about you, there’s lots of stuff you need to do.
Obviously IP addresses and email addresses are, as are usernames. Most profile information is. But all that is super easy to handle.
GDPR covers a whole range of things. Not all of those things will apply to every organisation. For a forum, compliance is pretty easy. Once you start running a storefront etc. it becomes a bit harder. And if you’re a social network which tracks and records all sorts of stuff about you, there’s lots of stuff you need to do.