<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1538775171678_58493"><span>Hi Nick, Athina</span></div><div id="yui_3_16_0_ym19_1_1538775171678_62069"><span><br></span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_62140"><span id="yui_3_16_0_ym19_1_1538775171678_62139">Perhaps the RIPE NCC legal team can give us some advice on this issue. In your presentation at RIPE 76 you said the justification for personal data in the RIPE Database was for contacting people about operational issues. If many of these 2 million people whose personal data is held in the RIPE Database are not contacts, is there any legal justification for having this amount of personal data in the database?</span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_62244"><span id="yui_3_16_0_ym19_1_1538775171678_62139"><br></span></div><div dir="ltr"><span id="yui_3_16_0_ym19_1_1538775171678_62139">Also if 'contacts' can be roles rather than identifiable people, can we justify holding this personal data simply because, historically, PERSON objects were used instead of ROLE objects?<br></span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_62164"><span id="yui_3_16_0_ym19_1_1538775171678_62139"><br></span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_62165"><span id="yui_3_16_0_ym19_1_1538775171678_62139">cheers</span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_62225"><span id="yui_3_16_0_ym19_1_1538775171678_62139">denis</span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_62236"><span id="yui_3_16_0_ym19_1_1538775171678_62139">co-chair DB-WG</span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1538775171678_58494"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1538775171678_59699" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1538775171678_59698"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1538775171678_59697"> <div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_59696"> <font id="yui_3_16_0_ym19_1_1538775171678_62051" size="2" face="Arial"> <hr id="yui_3_16_0_ym19_1_1538775171678_62050" size="1"> <b><span style="font-weight:bold;">From:</span></b> Nick Hilliard <nick@foobar.org><br> <b><span style="font-weight: bold;">To:</span></b> denis walker <ripedenis@yahoo.co.uk> <br><b><span style="font-weight: bold;">Cc:</span></b> DB-WG <db-wg@ripe.net><br> <b><span style="font-weight: bold;">Sent:</span></b> Sunday, 7 October 2018, 14:56<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [db-wg] PERSON objects in the RIPE Database<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1538775171678_59709"><br><div dir="ltr" id="yui_3_16_0_ym19_1_1538775171678_59710">denis walker wrote on 25/09/2018 23:55:<br clear="none">> So really the only question that must be answered is "Can we justify <br clear="none">> holding this amount of personal data on the basis of contacts for <br clear="none">> administrative and technical issues relating to internet resources and <br clear="none">> network operations?" If the answer is 'no' then change MUST happen, long <br clear="none">> before the universe dies.<br clear="none"><br clear="none">I.e. "is what we have [...] legal"?<br clear="none"><br clear="none">DBWG probably needs to get a legal opinion on this.<div class="yqt8047907200" id="yqtfd30334"><br clear="none"><br clear="none">Nick<br clear="none"></div></div><br><br></div> </div> </div> </div></div></body></html>