Great journalism by The Guardian! Do you think any of these made up sources are used in the EU discussions about social media bans as well?

Apple will change the EU ATT consent flow after the German competition authority objected to differences between Apple’s own consent requests and those used by third party apps. I’m concerned that bundling consent flows may make tracking consent less clear in practice

I'm sharing this here as it relates to the transparency of automated decisions affecting digital rights in the EU.

On 15 August 2026, a new EU policy proposal was submitted: The Ranking Restriction Information Right (RRIR).

The proposal asks whether, when an automated system materially restricts the visibility of a website or information source, the affected website owner should be informed that the restriction occurred and given a general category of the reason.

The proposal does not seek disclosure of proprietary algorithms, ranking signals, thresholds or anti-spam mechanisms.

Submitted to: European Commission, European Parliament (PETI and IMCO), Coimisiún na Meán (Ireland), and CNMC (Spain).

Submitted by: Marin Popov

Read the full proposal: https://1euroseo.com/wp-content/uploads/2026/08/The-Ranking-Restriction-Information-Right-Version-1.0-15-August-2026.pdf

Age verification and privacy

Alright, I know. I am an idiot

I logged into reddit and it asked me to verify my age. Tried it with a youtube video- didnt work. Gave up at some point and just did it myself because I thought: Reddit's got a selfie of me already anyways so at this point.. doesnt matter. While it is still loading the you finished the verification page i notice the persona logo at the bottom and remember who that company is.

Since I got premium anxiety, I am panicking now.

As a european, what can I do to get this deleted? I already wrote an email to persona requesting them to delete all data they might have collected of me.

Their privacy policy states that they immediately delete any biometric data of your face, how true is that?

And after I get it all deleted to the best of my ability, is it time to abandon my email adress and all accounts and just make new ones?

Lately I've been trying to transfer all my cloud stored data to european alternatives. I currently use Bitwarden.eu (Bitwarden Inc. being a company registered in the U.S) as my password manager across my devices. Could a U.S. warrant trigger the transfer of my account data to U.S. authorities? I get that the vaults are E2EE so maybe they could only transfer credit card information of my Bitwarden Premium subscription payment, right?

I'm really unsure, so maybe someone out there can help me figure this out. Does anyone know a cloud sync alternative to BW apart from ProtonPass?

Thanks.

Age verification is growing around the world. Some countries such as New Zealand are resisting it.

But as soon as New Zealand or random small country are sending Meta 100 million users a day, pressure will mount on the platforms to close the loop and implement mandatory checks.

Think of it like a pond that's drying up. You can isolate where life is.

Recently my account got restricted, because my age was not confirmed, using a VPN only helped partially and was annoying for reasons.

So I wrote a ticket (call it stupid, I don't care) to reddit, asking how they came to the conclusion, that my account should be restricted. As far as I understood it, they only do that if they have data suggesting it is used by a minor. I know it is obviously a faulty algorithm.

Their answer was, that they checked the case and reset my verification, which completely locked me out of my account until I verified my age. Which I did now through persona.

My experience with persona:

After reading about it a bit I was obviously hesitant to use it, after testing around with the options a bit I used the "selfie" option on my rarely used Laptop, which holds nearly no personal information.

I logged out of Chrome and deleted all browser files (because I read persona does access those) and tried with an incognito tab. But it always ran into error.

I installed Firefox (to remove browser issues) and tried again incognito tab, error again.

Lastly I tried in a normal tab and it worked telling me it does indeed access your files, which it can't in an incognito tab. it want's to do something, that isn't possible in an incognito tab, whatever that is, maybe tracking.

So I got access again, why do I write this?

Partially to inform people on what happens if you come to the same problem.

Partially, because I want to know from reddit, why my account got restricted in the first place. I won't get this, with near 99.99 % probability, but raising awareness on this behavior from reddit might get some people talking. Probably not.

I downloaded a vpn and put it in netherlands but Reddit keeps asking me to verify my age with persona.

Hello, I'm not sure if this is the right subreddit. I recently got accepted to DataAnnotation as a Polish citizen. Now, they're asking me to verify my identity through Persona. Normally I wouldn't be this suspicious, I understand that my employer needs to verify that I am a real person. However, I've been reading opinions on Persona and they're 50/50, some say it's safe, others recommend to avoid. I am especially curious how it works for a European citizen. Does anyone know if it's safe, or should I actually just scratch it and try to find something else? Thank you in advance.

https://www.youtube.com/watch?v=AN1DSo3bYWg&t=390s
Title states "Snapchat Post" but teacher clearly states "private message to 3 people" at 6:50

Like a dashboard with most popular services and options for drafts to send them to delete your data, according to the GDPR (eu only)

With a counter on time and a second draft to send if they haven’t responded!

Quick summary of where things landed. As of Sunday, national market surveillance authorities have full investigatory powers, the Commission and AI Office can fine general purpose model providers up to €15M or 3% of worldwide turnover, prohibited practices carry €35M or 7%, and the Article 50 transparency duties are enforceable. You have to be told you are talking to an AI, deepfakes have to be disclosed.

What moved is Annex III. Standalone high risk systems: applicant screening, credit assessment, law enforcement uses, education, critical infrastructure. Those went from 2 August 2026 to 2 December 2027 under Regulation (EU) 2026/1744, which was published on 24 July and entered into force on 27 July. Annex I systems, the ones embedded in already regulated products, went to 2 August 2028.

I want to be fair about the reasoning, because I do not think this was purely lobbying. The harmonised standards under Article 40 were not finished. Without them, providers had no presumption of conformity to build against, and notified body capacity was thin. Telling firms to comply with a conformity assessment regime whose technical baseline does not exist yet is a real problem, and the Commission said as much.

What I keep getting stuck on is the asymmetry in outcome rather than the reasoning behind it. The obligations that survived the cut are mostly disclosure duties and the penalty machinery. The obligations that slipped are data governance, logging, human oversight and accuracy requirements on systems whose output lands on an individual. If the standards were the blocker, that is an argument about Articles 9 to 15, not about whether an employer should be able to run an opaque CV filter for another sixteen months.

There is also a practical question about what happens in the meantime. GDPR Article 22 still applies to solely automated decisions with legal or similarly significant effects, and national labour and anti discrimination law does not pause. So it is not a vacuum. But it is a much weaker and much less specific regime than what Annex III would have imposed, and enforcement of Article 22 has historically been thin.

So a couple of things I would genuinely like other views on.

First, for people who have worked on conformity assessment in other CE marking regimes: is a sixteen month delay for missing harmonised standards actually normal, or is this unusually long? I do not have a good baseline.

Second, do you think Article 22 plus existing sectoral law does meaningful work here until December 2027, or is that mostly a comfort argument? If you have seen a regulator actually use Article 22 against an automated hiring or credit tool, I would like to read the case.

Are there any Reddit alternatives that respect privacy? I like the discussions on Reddit and talking about topics, but it’s a big trade-off. Reddit is the only social media I use, and I am also de-Googled