Regulations & compliance

Regulation (EU) 2016/679 governs personal-data processing in the EU/EEA; for this corpus it is a key external floor for contestability, transparency, and erasure — not a substitute for epistemic ethics.

Data subjects have the right not to be subject to solely automated decisions with legal or similarly significant effects, subject to exceptions — with transparency, safeguards, and rights to contest.

GDPR does not require silent rewrite of history — it requires lawful processing, accurate data, and erasure where applicable; immutability and GDPR reconcile through forward commits, tombstones, and scoped retention — not mutable audit logs.