Nothing. My point is simply that nothing has really changed, and I think it's important to understand that. There's not much point in getting upset because the EU required them to send you what was already posted on their site. While some specifics may have changed, and they are required to spell out more specifics than they did before, the general "rule of the public internet" hasn't changed. If you post it, or even just use the internet, you're giving up some of your privacy.
The basic policy is the same as it always has, whether we realize it or not. That's why everybody uses these free or nearly free services. People often seem to think that what they do on the internet is private, and that what they publish is owned by them. In almost every case, that's not true. But this isn't really all that different than any other public forum. If you send an article and photographs to a newspaper, unless you negotiate specific publication rights and copyrights, you've given them permission to republish as they see fit, even to your detriment.
In other words, once you make something public, you lose control of it. Copyright laws still apply, and if you can prove you didn't give them permission to republish, that's a different story. If somebody else posts something (like a photo you took) without your permission, you can fight that and request it be removed. But if that photo was copied and published on other sites, you have to go after each site individually.
Simply using public resources like the internet provides usable data to others. All of the companies involved protect the privacy of their subscribers/users, but that doesn't mean it won't be available to the law with due process. For example, whether you post here or not, your general location is recorded by the website. Not necessarily your exact physical location, but where you connect to the internet. I can pull a report that tells me state-by-state and country-by-country who visits my websites. If I'm a company (or a political organization) I can use that data to help me make decisions such as where to spend my advertising budget.
Your phone is constantly sending it's location via GPS, or if you don't share that, a more relative location based on triangulating cell towers and Wi-Fi. This data is compiled and used to help provide traffic data, for example, so you can use Google or Apple maps and know there's congestion up ahead, and you should find another route. Sp the old policy may not have spelled that out, but it has been there since the beginning, simply because of the way networks and the internet works.
The other thing that people don't seem to consider or really understand is that the internet is a global thing. Just because we have laws that protect certain things here doesn't mean that you have the same protections world-wide. If a site in Russia, Germany, the UK, Japan, or anyplace else decides to repost your material, often the only thing that the US can do is prevent that from being visible within the US. But they can't necessarily force them to take it down without the assistance of the government where the site is physically hosted.
I don't see any reason to be alarmed, nor is there any reason to change with NHRHTA does or where we host it. Privately hosting it, installing and maintaining the forum software, etc. is expensive, and really not an option for most including, I'd assume, us. In addition, I don't really see any reason why our discussions about our favorite railroad should raise any alarms for any of us. One of the main reasons for the organization's existence is to make more information about the railroad available to all.
This isn't new, it's not news, and it's important for people to be educated about what they are using. Be smart about what you post. That's all.