Sorry Laurent, accidentally sent this to you instead of the ML first.

I think it is reasonable to keep abuse email info.
Just my humble opinion though.

- Cynthia

On Mon, 7 Oct 2019, 14:19 Laurent Pellegrino via db-wg, <db-wg@ripe.net> wrote:
Hi there,

That's interesting. Does it mean that services providing contact information for abuse (e.g. https://ipinfo.io/abuse) are legally wrong? are you going to take any action?

Regards,
Laurent

Le lun. 7 oct. 2019 à 12:38, Edward Shryane via db-wg <db-wg@ripe.net> a écrit :
Dear Working Group,

We implemented and deployed the changes below for GDPR compliance as part of Whois 1.95.1, on the 18th September:

Apologies if this was not clear.

Regards
Ed Shryane
RIPE NCC



On 27 May 2019, at 11:30, Edward Shryane via db-wg <db-wg@ripe.net> wrote:

Dear Working Group,

as mentioned in last week's DB-WG meeting, we will shortly be implementing the following changes:

- Do not include personal data in historical queries (notify, e-mail, address attributes).
- Do not include person/role references in historical queries (admin-c, tech-c, ping-hdl, zone-c).

A legal review found we should not return historical contact details, as they may contain personal data, which is not in line with the purpose of the RIPE database or data protection legislation.

For background, Maria Stafyla from RIPE NCC Legal presented on this topic at RIPE 76:
https://ripe76.ripe.net/presentations/101-GDPR-Database-WG-RIPE-76.pdf

Regards
Ed Shryane
RIPE NCC