I'm wondering where the lines of GDPR are in regard to user generated content and how it meets the Communications Decency Act.
Section 230 has been what ISPs and websites (Yelp as an example) use as a defense for processing and managing user generated data on individuals and businesses.
Effectively, this section immunizes both ISPs and Internet users from liability for torts committed by others using their website or online forum, even if the provider fails to take action after receiving actual notice of the harmful or offensive content
- Where do we stand in 2018/2019 with GDPR compliance vs user generated content?
- To what extent could an individual's private data be submitted by an anonymous user and then "processed" and made public by a website legally?
- What other implications does GDPR have on the Communications Decency Act?
- Are there differences in your answers when these questions are applied to the United States?