Hi Niall On 02/06/2015 16:49, Niall O'Reilly wrote:
On Tue, 02 Jun 2015 14:36:21 +0100, Athina Fragkouli wrote:
If the RIPE community wishes to have access to contact details of individuals that were responsible for resolving operational problems in the past, then the RIPE community must have a specific, explicitly defined and legitimate purpose for it. If such a purpose is defined, the RIPE NCC will proceed with investigating the conditions under which this feature can be implemented in compliance with the Act. Implementation of this feature may include prior consent of these individuals. Thanks, Athina.
IIUC, if such a purpose as "maintaining a historical record" were defined, the relevant data subjects would have to opt in before their details could be included. Is that it?
Two of the existing purposes partially cover this: - Providing information about the Registrant and Maintainer of Internet number resources when the resources are suspected of being used for unlawful activities, to parties who are authorised under the law to receive such information. - Providing information to parties involved in disputes over Internet number resource registrations to parties who are authorised under the law to receive such information. These allow for the NCC to retain this information (maintain a historical record) for investigations or disputes that may arise in the future over historical resources. But neither allow for this historical information to be made publicly available in respect of personal data or (referring to my previous email) data used purely for the management of operational data. cheers denis
ATB Niall