5 ms·

> I've just made a unique ID for you, it's XYZUser. This is unique to you, and I'm storing this on my computer indefinitely. I was under the impression that in

• kenbaylor 7y ago
  Not true unfortunately under the GDPR nor it's predecessor, if the notes are publicly available: Bodil Lindquist v Åklagarkammaren (2003) Mrs. Lindquist (whose purposes were mostly charitable and religious) published on a private home page personal data about her colleagues, including telephone numbers and information about a coworker’s injured foot and medical leave. This case raised the question if a private home page accessible to only those who have the address is permitted under one of the exclusions (household activity). The European Court of Justice ruled that it is not.
  • wyattpeak 7y ago
    A "private home page accessible to only those who have the address" is a public page. That's not a private note, and I'd be livid if somebody was posting my contact and medical details online. I see no problem with this ruling, nor do I see it as evidence contrary to the idea that one may keep private notes.
    • PhillipRed 7y ago
      That's what the user wrote: It's only a problem if the notes are public.
      • wyattpeak 7y ago
        In response to a comment about keeping notes, which any reasonable person would interpret as meaning private notes. What got my goat, though, wasn't the mere, if silly, clarification that notes are only protected if they're private. It's the phrasing of the quote to suggest that somehow these notes should have been considered private because the publisher didn't intend on anyone reading them (despite publishing them such that they could).
        • dreggie 7y ago
          The quote is from an IAPP document, which quoted the courts wording. Source IAPP CIPP/E training manual, which I'm looking at right now.
          • wyattpeak 7y ago
            What court wording are you referencing? The judgment says "private home page which is none the less accessible to anyone who knows its address", a very different turn of phrase.
            • dreggie 7y ago
              Here you go: https://imgur.com/a/OGbjjQ0 https://imgur.com/a/OGbjjQ0
              • wyattpeak 7y ago
                I meant do you have a source for the court notes where they said that. It doesn't sound like a quote to me, it sounds like a precis. In fact it sounds like a precis of the quote I provided, but I could also imagine the defendant's lawyer saying it in the more loaded way presented here.
            • deleted 7y ago
              [deleted]
• kenbaylor 7y ago
  If it's not exposed to the internet no problem. Not true unfortunately under the GDPR nor it's predecessor, if the notes are publicly available: Bodil Lindquist v Åklagarkammaren (2003) Mrs. Lindquist (whose purposes were mostly charitable and religious) published on a private home page personal data about her colleagues, including telephone numbers and information about a coworker’s injured foot and medical leave. This case raised the question if a private home page accessible to only those who have the address is permitted under one of the exclusions (household activity). The European Court of Justice ruled that it is not.
  • DanBC 7y ago
    I'm not sure why you reposted this, because what you're describing isn't something purely for household use. https://gdpr-info.eu/recitals/no-18/ https://gdpr-info.eu/recitals/no-18/ > This Regulation does not apply to the processing of personal data by a natural person in the course of a purely personal or household activity and thus with no connection to a professional or commercial activity. 2Personal or household activities could include correspondence and the holding of addresses, or social networking and online activity undertaken within the context of such activities. 3However, this Regulation applies to controllers or processors which provide the means for processing personal data for such personal or household activities.
    • 3rdPartyDD 7y ago
      >> not sure why you reposted this Probably an edit issue The case is the precedent for the GDPR recital. Both of you are correct.