<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<pre wrap="">Hi Denis, all
According to Article 3 of the RIPE Database Terms and Conditions, one of
the defined purposes for the use of the RIPE Database is "Facilitating
coordination between network operators".
A PERSON object is meant to contain the (business) contact information
of people who are responsible for the networks the Internet number
resources correspond to and/or for maintaining the related information
in the RIPE Database and the DNS zone contacts.
If someone creates a PERSON object that is not meant for one of the
defined purposes, this would constitute a violation of the RIPE Database
Terms and Conditions (See Article 4.1.). It's also worth noting that
PERSON objects that are not referenced in any other object (and thus do
not serve any operational purpose) are automatically deleted after 90 days.
In general, personal data may only be processed in accordance with the
relevant principles. If personal data is no longer required in relation
to the defined purpose it was supplied/collected for, then its
processing will not be justified any more.
However, depending on the information that is inserted when a ROLE
object is created, it might contain personal data - this is something
the RIPE NCC has no control over.
Kind regards,
Maria Stafyla
Legal Counsel
RIPE NCC
</pre>
<blockquote type="cite"
cite="mid:1057238206.7767505.1538920182949@mail.yahoo.com">
<div style="color:#000; background-color:#fff;
font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande,
sans-serif;font-size:16px">
<div class="yahoo_quoted"
id="yui_3_16_0_ym19_1_1538775171678_73864" style="display:
block;"><span></span><span></span><span>Hi Nick, Athina</span>
<div style="font-family: Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif; font-size: 16px;"
id="yui_3_16_0_ym19_1_1538775171678_73863">
<div style="font-family: HelveticaNeue, Helvetica Neue,
Helvetica, Arial, Lucida Grande, Sans-Serif; font-size:
16px;" id="yui_3_16_0_ym19_1_1538775171678_73862">
<div class="y_msg_container"
id="yui_3_16_0_ym19_1_1538775171678_73869">
<div id="yiv8874821847">
<div id="yui_3_16_0_ym19_1_1538775171678_73868">
<div
style="color:#000;background-color:#fff;font-family:Helvetica
Neue, Helvetica, Arial, Lucida Grande,
sans-serif;font-size:16px;"
id="yui_3_16_0_ym19_1_1538775171678_73867">
<div
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62069"><span><br
clear="none">
</span></div>
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62140"><span
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62139">Perhaps the RIPE
NCC legal team can give us some advice on this
issue. In your presentation at RIPE 76 you
said the justification for personal data in
the RIPE Database was for contacting people
about operational issues. If many of these 2
million people whose personal data is held in
the RIPE Database are not contacts, is there
any legal justification for having this amount
of personal data in the database?</span></div>
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62244"><span
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62139"><br clear="none">
</span></div>
<div dir="ltr"
id="yui_3_16_0_ym19_1_1538775171678_73872"><span
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62139">Also if
'contacts' can be roles rather than
identifiable people, can we justify holding
this personal data simply because,
historically, PERSON objects were used instead
of ROLE objects?<br clear="none">
</span></div>
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62164"><span
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62139"><br clear="none">
</span></div>
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62165"><span
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62139">cheers</span></div>
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62225"><span
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62139">denis</span></div>
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62236"><span
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62139">co-chair DB-WG</span></div>
<div class="yiv8874821847qtdSeparateBR"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_58494"><br
clear="none">
<br clear="none">
</div>
<div class="yiv8874821847yqt3292990885"
id="yiv8874821847yqt31400">
<div class="yiv8874821847yahoo_quoted"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_59699"
style="display:block;">
<div
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_59698"
style="font-family:Helvetica Neue,
Helvetica, Arial, Lucida Grande,
sans-serif;font-size:16px;">
<div
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_59697"
style="font-family:HelveticaNeue,
Helvetica Neue, Helvetica, Arial, Lucida
Grande, Sans-Serif;font-size:16px;">
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_59696">
<font
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62051"
face="Arial" size="2"> </font>
<hr
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_62050"
size="1"> <b><span
style="font-weight:bold;">From:</span></b>
Nick Hilliard <a class="moz-txt-link-rfc2396E" href="mailto:nick@foobar.org"><nick@foobar.org></a><br
clear="none">
<b><span style="font-weight:bold;">To:</span></b>
denis walker
<a class="moz-txt-link-rfc2396E" href="mailto:ripedenis@yahoo.co.uk"><ripedenis@yahoo.co.uk></a> <br
clear="none">
<b><span style="font-weight:bold;">Cc:</span></b>
DB-WG <a class="moz-txt-link-rfc2396E" href="mailto:db-wg@ripe.net"><db-wg@ripe.net></a><br
clear="none">
<b><span style="font-weight:bold;">Sent:</span></b>
Sunday, 7 October 2018, 14:56<br
clear="none">
<b><span style="font-weight:bold;">Subject:</span></b>
Re: [db-wg] PERSON objects in the RIPE
Database<br clear="none">
</div>
<div class="yiv8874821847y_msg_container"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_59709"><br clear="none">
<div dir="ltr"
id="yiv8874821847yui_3_16_0_ym19_1_1538775171678_59710">denis
walker wrote on 25/09/2018 23:55:<br
clear="none">
> So really the only question that
must be answered is "Can we justify <br
clear="none">
> holding this amount of personal
data on the basis of contacts for <br
clear="none">
> administrative and technical
issues relating to internet resources
and <br clear="none">
> network operations?" If the
answer is 'no' then change MUST
happen, long <br clear="none">
> before the universe dies.<br
clear="none">
<br clear="none">
I.e. "is what we have [...] legal"?<br
clear="none">
<br clear="none">
DBWG probably needs to get a legal
opinion on this.
<div
class="yiv8874821847yqt8047907200"
id="yiv8874821847yqtfd30334"><br
clear="none">
<br clear="none">
Nick<br clear="none">
</div>
</div>
<br clear="none">
<br clear="none">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>