Hi Hank

As they said in the legal presentation at RIPE 76, GDPR considerations are not finished, they are only just starting. A data controller is required to review if the personal data they hold is justified. I don't think the purpose of the RIPE Database can justify 2 million+ PERSON objects or holding personal data when a corporate role is all that is needed.

cheers

denis

co-chair DB-WG

From: Hank Nussbacher via db-wg <db-wg@ripe.net>
To: db-wg@ripe.net
Sent: Thursday, 20 September 2018, 14:28
Subject: Re: [db-wg] PERSON objects in the RIPE Database

On 20/09/2018 15:04, denis walker via db-wg wrote:

Colleagues,

The purpose in the Terms and Conditions may define a reason for holding contact information, but it doesn't justify this level of personal data being held in the database. Perhaps it's time to review what is meant by 'contact information'. What is really needed to satisfy this purpose? For example, why do we need an address for a technical contact who may need to be contacted in the event of an operational issue? No one is going to go to that address or post a letter.

As always your thoughts and opinions are welcome...

cheers
denis
co-chair DB WG

I think HOHO-RIPE would tend to disagree.

-Hank