3 ms·

For the first question is YES But, to be picky you have to be sure that data are ALWAYS STORED in the EU boundaries. which Amazon cannot guarantee. Personal d

by esseti 11y ago

For the first question is YES But, to be picky you have to be sure that data are ALWAYS STORED in the EU boundaries. which Amazon cannot guarantee. Personal data (and other data) are defined by the EU and probably US. The EU is EU Directive 95/46/EC (citing from wikipedia) "any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;" (art. 2 a).

a_bonobo 11y ago
Thank you for that - > ALWAYS STORED in the EU boundaries. which Amazon cannot guarantee. That makes sense, and I fear of what we'd do to enforce this - full data inspection just to make sure that Amazon doesn't transfer private data to the US? >n identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity So a username like "a_bonobo" wouldn't fall under personal data as it's not really identifiable (but what if I research bonobos? My username gives a clue to my job, if that would be my job!). So under gasull's link I think that a lot of what the climbing community would save isn't directly personal data, as you don't need much information from your users to run such a site (except if you want to have Facebook's business model). Or am I wrong? I mean, you can even identify someone based on their writing patterns.
- esseti 11y ago
  (sorry for the late reply) You can't guarantee that AWS is doing. You have to belive it. That's why hospitals & co keep the data in their own servers. And, if in the cloud, they try to avoid US companies as much as they can. the username if not directly linked to someone (e.g., not an email) usually does not fall into personal data. But, since many usernames are reused by people they may identify the person. This is a a case which, honestly, i would not know how to deal with. I'll try to get an answer.
  - deleted 11y ago
    [deleted]
- esseti 11y ago
  Ok, talking with colleagues the outcome is: if the username is reused and used as something personal, than it's a personal data. I do bet that if you google my username it's not that difficult to find out who I am. Then is personal, which make sense in the end. The problem is how to deal with the data since for a Data Processor the datum is meaningless. That's why we created our startup in EU.

by esseti 11y ago

a_bonobo 11y ago

Thank you for that - > ALWAYS STORED in the EU boundaries. which Amazon cannot guarantee. That makes sense, and I fear of what we'd do to enforce this - full data inspection just to make sure that Amazon doesn't transfer private data to the US? >n identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity So a username like "a_bonobo" wouldn't fall under personal data as it's not really identifiable (but what if I research bonobos? My username gives a clue to my job, if that would be my job!). So under gasull's link I think that a lot of what the climbing community would save isn't directly personal data, as you don't need much information from your users to run such a site (except if you want to have Facebook's business model). Or am I wrong? I mean, you can even identify someone based on their writing patterns.

esseti 11y ago
(sorry for the late reply) You can't guarantee that AWS is doing. You have to belive it. That's why hospitals & co keep the data in their own servers. And, if in the cloud, they try to avoid US companies as much as they can. the username if not directly linked to someone (e.g., not an email) usually does not fall into personal data. But, since many usernames are reused by people they may identify the person. This is a a case which, honestly, i would not know how to deal with. I'll try to get an answer.
- deleted 11y ago
  [deleted]
esseti 11y ago
Ok, talking with colleagues the outcome is: if the username is reused and used as something personal, than it's a personal data. I do bet that if you google my username it's not that difficult to find out who I am. Then is personal, which make sense in the end. The problem is how to deal with the data since for a Data Processor the datum is meaningless. That's why we created our startup in EU.