416
edits
Difference between revisions of "GDPR"
Jump to navigation
Jump to search
Remove next meeting
(Remove next meeting) |
|||
| (2 intermediate revisions by one other user not shown) | |||
| Line 1: | Line 1: | ||
== Introduction == | == Introduction == | ||
| Line 38: | Line 36: | ||
# Data Controller - a person or organisation who collects, stores or processes data about a natural person and who determines the goals and the means of the processing of the data. | # Data Controller - a person or organisation who collects, stores or processes data about a natural person and who determines the goals and the means of the processing of the data. | ||
# Data Processor - a person (not employee of the controller) or organisation who processes data on behalves of a Data Controller. | # Data Processor - a person (not employee of the controller) or organisation who processes data on behalves of a Data Controller. | ||
# Third Party - a Data Controller that receives data from | # Third Party - a Data Controller that receives data from another Controller. This transfer of Data is a processing on its own within the GDPR. | ||
Within the XMPP network the following roles can be found: | Within the XMPP network the following roles can be found: | ||
| Line 252: | Line 250: | ||
=== LQ1 user-sent content and art. 9.1 === | === LQ1 user-sent content and art. 9.1 === | ||
Does 9.1 automatically apply to all (not e2e encrypted) user-sent content, or only if we are analyzing it for profiling/other purposes? Does using e2e encryption change this? | Does 9.1 automatically apply to all (not e2e encrypted) user-sent content, or only if we are analyzing it for profiling/other purposes? Does using e2e encryption change this? | ||
# Lawyer 1: Message content is similar to picture uploads. As long as we treat it as an | # Lawyer 1: Message content is similar to picture uploads. As long as we treat it as an opaque blob and don't analyse it, art9 doesn't apply, (See r51). Not sure how this plays with mod_firewall processing, spam filtering etc. | ||
opaque blob and don't analyse it, art9 doesn't apply, (See r51). Not sure how this plays with mod_firewall processing, spam filtering etc. | |||
# Lawyer 2: 9.1 is not applicable because it is revealed by the user (9.2e). | # Lawyer 2: 9.1 is not applicable because it is revealed by the user (9.2e). | ||
So user content is NOT subject to art. 9.1 | So user content is NOT subject to art. 9.1 | ||