@bugbear@tech.lgbt @fediblock@mastodon.art It being "public data" does not make it exempt from the GDPR. Data processing in the GDPR is generally based on either consent or a technical need to provide a requested service, and neither apply here.
So that means that even if the data is 'public' from a technical perspective, this is probably still unauthorized processing of that data - and *very clearly so* if it even ignores opt-out flags.
@bugbear@tech.lgbt @fediblock@mastodon.art (This sort of thing is why the GDPR is entirely about grounds for *processing*, rather than classifying the data itself as being public vs. private)
