# Does Solid adoption help companies to be GDPR compilant?

**URL:** <https://forum.solidproject.org/t/does-solid-adoption-help-companies-to-be-gdpr-compilant/5041>\
**Category:** General Discussion\
**Created:** [January 17, 2022, 5:33pm UTC](https://forum.solidproject.org/t/does-solid-adoption-help-companies-to-be-gdpr-compilant/5041 "2022-01-17T17:33:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![joe](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/joe/32/2916_2.png) [@joe](https://forum.solidproject.org/u/joe)\
**Post date:** [January 17, 2022, 5:33pm UTC](https://forum.solidproject.org/t/does-solid-adoption-help-companies-to-be-gdpr-compilant/5041/1 "2022-01-17T17:33:56Z")

</div>

In Europe, it is now pretty complicated to deal with users’ data since the GDPR European law.

Does Solid help app developers to be GDPR compliant? And in which ways?

---

<div class="post-metadata">

**Author:** ![aveltens](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/aveltens/32/3987_2.png) [@aveltens](https://forum.solidproject.org/u/aveltens)\
**Post date:** [January 19, 2022, 7:22am UTC](https://forum.solidproject.org/t/does-solid-adoption-help-companies-to-be-gdpr-compilant/5041/2 "2022-01-19T07:22:59Z")

</div>

I am not a lawyer, so this is probably quite simplified:

If you are storing personal data, you have to be GDPR compliant, which can be quite complicated. So the best thing to do is not store personal data at all. With Solid, the Pod provider is holding the data. While you might need users consent to collect the data, you are at least not responsible for storing and securing them, so in my understanding relying on Solid helps a lot with that.

---

<div class="post-metadata">

**Author:** ![ChrisFowells](https://avatars.discourse-cdn.com/v4/letter/c/7feea3/32.png) [@ChrisFowells](https://forum.solidproject.org/u/ChrisFowells)\
**Post date:** [February 20, 2024, 12:24pm UTC](https://forum.solidproject.org/t/does-solid-adoption-help-companies-to-be-gdpr-compilant/5041/3 "2024-02-20T12:24:39Z")

</div>

> **[Making Sense of Solid for Data Governance and GDPR](https://www.mdpi.com/2078-2489/14/2/114)**
>
> Solid is a new radical paradigm based on decentralising control of data from central organisations to individuals that seeks to empower individuals to have active control of who and how their data is being used. In order to realise this vision, the...

This is , as far as i can see, the best and most detailed analysis paper on how Solid and GDPR work.

Summary: There are significant legal issues and i it feels like the statement “Solid is not GDPR compliant” is true.

This was published in Feb 2023 and it would be great to know if there have been any more analysis - enhancements based on the conclusions of this paper.
