4 ms·

It is very doubtful there is any need to search posts. The data are still necessary for the purpose they were originally collected, and there is also a archivin

by belorn 8y ago

It is very doubtful there is any need to search posts. The data are still necessary for the purpose they were originally collected, and there is also a archiving exception which may apply. If I was them I would just send the person their login profile and delete that from the site. Everything else is excepted, including backups which are kept for security. A good community example to look at is Wikipedia. I will star to worry if and when I see them start deleting profiles and articles. Until then I see this kind of articles like a bit of scared interpretation of how nations might implement and apply GDPR.

atoav 8y ago
An article you agreed to publish on a public encyclopedia hardly counts as personal data..
- x0x0 8y ago
  Person B mentions person A by name or by nym. Person B describes person A without mentioning a name, eg by describing person A in a way which is recognizable. (eg the pilot that shot down the death star.) The first is at least searchable...
  - geocar 8y ago
    But neither are in scope. The GDPR makes exceptions for journalistic use cases (An encyclopedia certainly counts; see Article 85 and 89), and it does not require that you link a person (e.g. in your second case; see Recital 26) if you have no other reason to do. If someone persists, Article 11 makes it possible to put the onus on the person to identify any data in this category. - https://gdpr-info.eu/art-89-gdpr/ https://gdpr-info.eu/art-89-gdpr/ - https://gdpr-info.eu/art-85-gdpr/ https://gdpr-info.eu/art-85-gdpr/ - https://gdpr-info.eu/art-11-gdpr/ https://gdpr-info.eu/art-11-gdpr/ - https://gdpr-info.eu/recitals/no-26/ https://gdpr-info.eu/recitals/no-26/
x0x0 8y ago
data being necessary for original purpose doesn't help; you can withdraw consent
- kruczek 8y ago
  You can withdraw consent, but data may have been collected not based on consent, in which case your consent is irrelevant.

by belorn 8y ago

atoav 8y ago

An article you agreed to publish on a public encyclopedia hardly counts as personal data..

x0x0 8y ago
Person B mentions person A by name or by nym. Person B describes person A without mentioning a name, eg by describing person A in a way which is recognizable. (eg the pilot that shot down the death star.) The first is at least searchable...
- geocar 8y ago
  But neither are in scope. The GDPR makes exceptions for journalistic use cases (An encyclopedia certainly counts; see Article 85 and 89), and it does not require that you link a person (e.g. in your second case; see Recital 26) if you have no other reason to do. If someone persists, Article 11 makes it possible to put the onus on the person to identify any data in this category. - https://gdpr-info.eu/art-89-gdpr/ https://gdpr-info.eu/art-89-gdpr/ - https://gdpr-info.eu/art-85-gdpr/ https://gdpr-info.eu/art-85-gdpr/ - https://gdpr-info.eu/art-11-gdpr/ https://gdpr-info.eu/art-11-gdpr/ - https://gdpr-info.eu/recitals/no-26/ https://gdpr-info.eu/recitals/no-26/

x0x0 8y ago

data being necessary for original purpose doesn't help; you can withdraw consent

kruczek 8y ago
You can withdraw consent, but data may have been collected not based on consent, in which case your consent is irrelevant.