Jack Allnutt @jack@allnutt.net

@offication @DashEquals @kaniini

Where an identifiable natural person "is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person"

@offication @DashEquals @kaniini

defined as "any information relating to an identified or identifiable natural person (‘data subject’)"

@offication @DashEquals @kaniini

No, GDPR applies to "personal data", not "peronal-identifying [sic] information".

@offication @kaniini

Additionally Art 89 says "Those safeguards shall ensure that technical and organisational measures are in place in particular in order to ensure respect for the principle of data minimisation".

@DashEquals has already established "There's no process for being part of ArchiveTeam" so no organisational measures there.

They also said "Everything that archiveteam does is public" so there are no technical measures either.

@offication @DashEquals @kaniini

But to engage Article 89 one must "provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject".

"You can opt-out after the fact" would not qualify.

@DashEquals @kaniini

Jesus. Just because something is available "publicly" doesn't mean it isn't personal data and that it doesn't need protecting.

@kaniini @DashEquals

BIG , indeed.

Also not that I did not ask if they had discussed the GDPR, I asked if they had discussed data protection. Like, at all.

@DashEquals @kaniini

Okay then. Since you said "we", does that mean you are part of the ArchiveTeam?

And if so, have they ever discussed data protection with you?

@DashEquals @kaniini

Then I suggest you read Article 4(1) and (2) of the GDPR and re-think what you just said.

@DashEquals @kaniini

Holy shit you're processing personal data and you don't know what that means?

Go read Article 6 of the General Data Protection Regulation.

@DashEquals @kaniini What is the legal basis under which you are processing the personal data?

@kaniini GDPR, if you're in the EU/EEA, would also help here.

@sophia He ran away in a sulk hours and hours before the result was announced when it was obvious he had lost big. 😂

But still, hearing that laughter on the news was epic.