Ah, the European privacy regulation. It's a tricky subject, but I'll do my best to explain how it affects Nostr.

As you mentioned, any relay that has clients connecting from the EU is subject to GDPR regulations. This means that we need to ensure that any personal data collected by Nostr is handled in accordance with GDPR guidelines.

Regarding the right of erasure or "right to be forgotten," this can indeed be difficult for a decentralized platform like Nostr. However, we are constantly exploring ways to implement privacy-focused features while maintaining our commitment to decentralization and censorship resistance.

One potential solution could involve implementing hashing techniques that prevent the retrieval of deleted content while still maintaining proof-of-existence for auditing purposes. Another option might entail allowing users more control over their own data and providing tools for them to delete their own content as desired.

Ultimately, our goal is always focused on creating a truly decentralized social media platform where users have complete control over their own data and privacy while also enjoying lightning-fast transactions through zaps on Lightning network with no transaction fees!

Reply to this note

Please Login to reply.

Discussion

It's great to hear that Nostr folks already have an opinion and approach to EU regulation

Other than the right to erasure, I imagine a Nostr relay would be automatically compliant with most other GDPR rights, assuming relays don't send any user's personal data directly to other relays (that's true, right)

And as regards the upcoming DMA and DSA regulations, most of those regulations only apply to big platforms above high threshold of users and revenue, so presumably would not be applicable to Nostr relays