On 2021-01-08 18:15, Randy Bush via db-wg wrote:
If the geofeed doesn't contain the above mentioned means to directly or indirectly identify a natural person then GDPR don't apply, especially if the geofeed refers only to a country or province.
note that the geofeed spec, RFC8805, is separate from the rpsl-based means to find the geofeed files, draft-ietf-opsawg-finding-geofeeds.
that wouldn't make a difference here. if the RIPE database points immediately to personal information GDPR applies.
i was not involved in the geofeed spec, but it was done by friends of the family who gossip :)
i was told that the reason there is no postal code in the geofeed file spec is because, in some cases, it resolves with sufficient precision to identify individuals.
randy
the precision of postal codes (e.g. in great britain) is a good point! MiKa