3 ms·
What you are suggesting would not only make compliance of GDPR impossible for any company that accepts any form of user submitted data, it would also violate th
by Aengeuad 8y ago
What you are suggesting would not only make compliance of GDPR impossible for any company that accepts any form of user submitted data, it would also violate the privacy of the users submitting said data.
If I, party A, send a message to party B that happens to contain information about party C, party C does not get to see the messages between parties A and B just because it concerns them or has personally identifying information about them.
- dogma1138 8y agoActually under GDPR they do you need to perform data discovery to identify that data. https://enterprise.microsoft.com/en-gb/articles/roles/discover-gdpr/ https://enterprise.microsoft.com/en-gb/articles/roles/discov... GDPR does not cover only data you collect through your primary business model but ALL DATA defined as Personal Information under the GDPR.
- AstralStorm 8y agoNot really true, unless it was explicitly submitted as protected data. What toy have to doo is to provide a way to scrub accidental data leaks. I'm thinking cases like "someone posted a picture of their friend with a cat on your site". Not explicitly labelled "send in a photo of yourself". Or if someone posted another's address. You should respond to it at least in request, preferably earlier. The discovery service is mostly to help people transition by checking their third party operators if they do not know who that is.