Facebook Group and GDPR

CFrog

If this isn't the correct place for this post please redirect me.

I am an Admin on a Facebook Group that provides nothing more than a 'chat room' facility enabling like-minded Members to exchange information, ask questions and make statements.  Members typically make comments on other Members' posts, post pictures and links; the usual stuff.  There is certainly no 'processing' or 'harvesting' of data.
 
Recently, a 'difficult' Member has asked that their personal data be removed from the Group and to comply with GDPR I understand I have to do something about this.
I am aware that FB has the tools that allow Members to remove their OWN posts and comments so I am comfortable with the 'difficult' Member being able to deal with this themselves.

The problem arises where the Member's name (or on rare occasions an email address) is used in OTHER Members' posts  As this is another Member's post, I cannot edit the content to remove this personal data.  Does this information have to be removed too?

Can anyone offer any advice on this or direct me towards someone who could help?  I have looked on the ICO web site but there's nothing specific that covers my problem.

Thanks in advance

Fosterdog

You would be better off contacting Facebook support for this one, there are going to be many grey lines in this type of situation. 

[Deleted User]

 Not a problem for you. The request is for data controllers. You are not a data controller because you do not own or manage Facebook. 
Tell them to contact Facebook. 

born_again

I had a post deleted from our local group due to a shop owner citing "Data Protection" as I took a picture of a notice in their window. Stating that they were shut due to a staff member having contact with some with Covid, as such they were all isolating.
No Admin told me they had done it, I had to ask and when DP was cited. The reply was you mean GDPR (seems someone does not keep up with regulations).
Given, it was a notice in the shop window, we could not work out how it could even be a breech.
The picture was to warn people that they were shut as it is a very popular shop and to stop people having to make unnecessary trips.

mattyprice4004

Remove and block them, not your problem then. They sound like a right dipstick.

unholyangel

_shel said:

 Not a problem for you. The request is for data controllers. You are not a data controller because you do not own or manage Facebook. 
Tell them to contact Facebook. 

There's legal precedent for facebook admins being held liable not just for GDPR breaches but also what's posted on their group. The GDPR precedent is not parallel facts - in that case there was no privacy notice about processing of data when people visited the facebook group. But the consensus was that the admin were indeed processing personal information (group insights for example) and were jointly liable for that processing, along with facebook. 

sysadmin

Storing data is classed as processing under GDPR, so just being displayed on facebook then the personal information is classed as "being processed" 

But as another poster has said, you are not the data controller, Facebook are, so its their responsibility to remove any personal information of the data subject under the "Right to erasure" 

debbie6899

I am an admin of a Facebook group. I would do this by clicking on a post of theirs and select ‘delete post and block member’ once you select this option a further menu pops up which states ‘remove all posts by this member’ That might do the trick 

PragmaticMoneySaver

born_again said:

No Admin told me they had done it, I had to ask and when DP was cited. The reply was you mean GDPR (seems someone does not keep up with regulations).

No, they were indeed correct.  It is still data protection.  The legislation enacted to incorporate GDPR in England is the Data Protection Act 2018.