<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1537195136705_171352"><span>Hi Cynthia</span></div><div id="yui_3_16_0_ym19_1_1537195136705_171919"><span><br></span></div><div id="yui_3_16_0_ym19_1_1537195136705_171920"><span id="yui_3_16_0_ym19_1_1537195136705_171945">Having duplicate copies of personal data spread around a public database is probably not inkeeping with the principles of GDPR. Cleaning that up would be possible but not trivial. They have to be identified and may have different maintainers who would have to be contacted.</span></div><div id="yui_3_16_0_ym19_1_1537195136705_172005"><span id="yui_3_16_0_ym19_1_1537195136705_171945"><br></span></div><div id="yui_3_16_0_ym19_1_1537195136705_172015"><span id="yui_3_16_0_ym19_1_1537195136705_171945">Un-referenced PERSON objects (and PERSON/MNTNER pairs) are already deleted automatically after 90 days. So this 2 million+ does not include any of them.</span></div><div id="yui_3_16_0_ym19_1_1537195136705_172052"><span id="yui_3_16_0_ym19_1_1537195136705_171945"><br></span></div><div id="yui_3_16_0_ym19_1_1537195136705_172080"><span id="yui_3_16_0_ym19_1_1537195136705_171945">cheers</span></div><div><span id="yui_3_16_0_ym19_1_1537195136705_171945">denis</span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_172062"><span id="yui_3_16_0_ym19_1_1537195136705_171945">co-chair DB-WG</span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1537195136705_171353"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1537195136705_171359" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1537195136705_171358"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1537195136705_171357"> <div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_171356"> <font id="yui_3_16_0_ym19_1_1537195136705_171355" size="2" face="Arial"> <hr id="yui_3_16_0_ym19_1_1537195136705_171354" size="1"> <b><span style="font-weight:bold;">From:</span></b> Cynthia Revström via db-wg <db-wg@ripe.net><br> <b><span style="font-weight: bold;">To:</span></b> db-wg@ripe.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, 20 September 2018, 15:23<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [db-wg] PERSON objects in the RIPE Database<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1537195136705_171360"><br><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_171378">Hi,<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_171379"><br></div><div dir="ltr">I am not sure how the best way to do this but maybe check the database<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_172063">for person handles with identical name, address, phone number and such<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_172064">things.<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_172065"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_172066">Also maybe if we could take a look at the amount of person handles that<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_172067">are not used at all in any other object, and potentially delete them.<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1537195136705_172068"><br></div><div dir="ltr">Kind regards,<br></div><div dir="ltr">Cynthia Revström<br></div><div dir="ltr"><br></div><div dir="ltr">On 2018-09-20 14:57, Alexander Stranzky via db-wg wrote:<br></div><div dir="ltr">> On 20/09/2018 15:04, denis walker via db-wg wrote:<br></div><div dir="ltr">>> Colleagues,<br></div><div dir="ltr">>><br></div><div dir="ltr">>> I will start with a blunt question, then give some arguments for my<br></div><div dir="ltr">>> concern. In May the RIPE NCC told me there are?more than 2 million<br></div><div dir="ltr">>> PERSON objects in the RIPE Database. That is almost 25% of the objects<br></div><div dir="ltr">>> in the database. Who are these people and why do we hold so much<br></div><div dir="ltr">>> personal data?<br></div><div dir="ltr">> Hello,<br></div><div dir="ltr">><br></div><div dir="ltr">> I suspect that many of these objects are old (pre-API) and/or<br></div><div dir="ltr">> duplicates. Before RIPE had a REST API (and I can't tell how many ISPs<br></div><div dir="ltr">> still use emails to create their resources) automatically fetching,<br></div><div dir="ltr">> linking, and updating a RIPE object was a pain (as is the current<br></div><div dir="ltr">> situation with APNIC) and likely involved someone to create the email<br></div><div dir="ltr">> personally. Hence going the easy route--making new entries every time.<br></div><div dir="ltr">><br></div><div dir="ltr">> Regards,<br></div><div dir="ltr">> Alexander Stranzky<br></div><div dir="ltr">><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><br><br></div> </div> </div> </div></div></body></html>