4 ms·

Yes, which is why you can't use email to send sensitive personal data anymore.

• detaro 8y ago
  That doesn't mean your mail provider isn't GDPR compliant. And with the proper agreements and technical steps in place, a business sending personal data via e-mail could be totally fine to. (a big one would be requiring transport encryption, which is a sensible choice for ActivityPub too, and made by implementations, e.g. Mastodon) It's specific to the use case and what guarantees you have, and not a strict property of a protocol.
  • Kiro 8y ago
    What technical steps? My business used to send personal data to normal people via email (their own data). Now we can't do that anymore.
    • kyberias 8y ago
      Why can't you do that? GDPR does not require end-to-end email encryption.
    • albertgoeswoof 8y ago
      Yes you can.
    • icedchai 8y ago
      What do you do instead? Ship it to them on CD?
      • Kiro 8y ago
        They need to log in to access the information.
        • icedchai 8y ago
          Sounds silly and inconvenient that you can't send their own info to their own email. Recommend you go back to what you did before. If you receive any GDPR letters, sort it out then.