3 ms·

The exceptions are if there is an different law that supersedes GDPR. However none of them are indefinitely so sooner or later GDPR will apply.

by he0001 8y ago

extra88 8y ago
From Article 17, Right to erasure (‘right to be forgotten’) [0], "the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: (a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; If one can argue the personal data is still necessary, e.g. for the purpose of attribution in a repo, then the controller is not obliged to erase it. Paragraph 3 is all about exceptions including ones for freedom of expression and "establishment, exercise or defence of legal claims," e.g. copyright or other IP. [0] https://gdpr-info.eu/art-17-gdpr/ https://gdpr-info.eu/art-17-gdpr/
- he0001 8y ago
  But attribution is not permanent legal requirement it’s eventually going to expire. And copyright or IP is about the owner of the repository, but not the personal information in a repository. I find it hard that “copyright” or IP applies to personal information unless you are the one owning it, which you don’t if you work for a company. However it could be kind of funny if you work another company contributing to a project owned by another company. About “defense of legal claims”, removing people from the history will only strengthen your claim as the owner of the repo? I’m not convinced that paragraph 3 actually applies here, not sure what exact claims can be done for keeping that information as it is. And can github “hide” behind such vague exceptions?
  - extra88 8y ago
    GitHub may have to add some capabilities but I'm thinking about the people running the repo; retaining attribution of submissions as a defense against accusations of code theft. I was also mainly thinking about public repos open source, not code contributions by employees in a work-for-hire situation.

The exceptions are if there is an different law that supersedes GDPR. However none of them are indefinitely so sooner or later GDPR will apply.

by he0001 8y ago

The exceptions are if there is an different law that supersedes GDPR. However none of them are indefinitely so sooner or later GDPR will apply.

extra88 8y ago

From Article 17, Right to erasure (‘right to be forgotten’) [0], "the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: (a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; If one can argue the personal data is still necessary, e.g. for the purpose of attribution in a repo, then the controller is not obliged to erase it. Paragraph 3 is all about exceptions including ones for freedom of expression and "establishment, exercise or defence of legal claims," e.g. copyright or other IP. [0] https://gdpr-info.eu/art-17-gdpr/ https://gdpr-info.eu/art-17-gdpr/

he0001 8y ago
But attribution is not permanent legal requirement it’s eventually going to expire. And copyright or IP is about the owner of the repository, but not the personal information in a repository. I find it hard that “copyright” or IP applies to personal information unless you are the one owning it, which you don’t if you work for a company. However it could be kind of funny if you work another company contributing to a project owned by another company. About “defense of legal claims”, removing people from the history will only strengthen your claim as the owner of the repo? I’m not convinced that paragraph 3 actually applies here, not sure what exact claims can be done for keeping that information as it is. And can github “hide” behind such vague exceptions?
- extra88 8y ago
  GitHub may have to add some capabilities but I'm thinking about the people running the repo; retaining attribution of submissions as a defense against accusations of code theft. I was also mainly thinking about public repos open source, not code contributions by employees in a work-for-hire situation.