3 ms·

Its been clear from the start that emails would be covered by GDPR, and I believe that was the intent. edit: Official GDPR site, page on email: https://gdpr.eu

Its been clear from the start that emails would be covered by GDPR, and I believe that was the intent. edit: Official GDPR site, page on email: https://gdpr.eu/email-encryption/ https://gdpr.eu/email-encryption/ also, see the widely circulated 'GDPR letter from hell', which is a sort of worst-case access-to-data request that could be made under the legislation: https://www.linkedin.com/pulse/nightmare-letter-subject-access-request-under-gdpr-karbaliotis/ https://www.linkedin.com/pulse/nightmare-letter-subject-acce... In particular, please tell me what you know about me in your information systems, whether or not contained in databases, and including e-mail, documents on your networks, or voice or other media that you may store.

GordonS 7y ago
Has it? I've done much reading on the GDPR, and it certainly wasn't clear to me. "Data", of course - but regardless of technicality, I see email/slack/IM messages more as "personal communication" than "data".
- codeulike 7y ago
  Yes definitely email/slack/and IM. The EU was not kidding around with this. Its a walloping huge piece of legislation with wide reaching implications.
bhelkey 7y ago
From elsewhere in this thread, here is an article from a year ago that dismisses using GDPR to access emails about you. https://thenextweb.com/eu/2018/05/03/no-gdpr-wont-let-you-read-your-bosss-emails-about-you/ https://thenextweb.com/eu/2018/05/03/no-gdpr-wont-let-you-re...
- codeulike 7y ago
  .. based on what some lawyer said about case law, before the legislation even went live. Here's some discussion about it on the r/gdpr subreddit, the consensus seems to be emails probably are covered. https://www.reddit.com/r/gdpr/comments/8lsgwm/can_you_request_emails_that_include_your_name/ https://www.reddit.com/r/gdpr/comments/8lsgwm/can_you_reques... One person sums it up as: Emails that mention you are likely to count as personal data. However, your right to access that data must be balanced with the right to privacy of anyone else mentioned in the emails. The company would be entitled to redact the emails before sending them, and potentially to refuse the request entirely if that would require excessive effort.

GordonS 7y ago

Has it? I've done much reading on the GDPR, and it certainly wasn't clear to me. "Data", of course - but regardless of technicality, I see email/slack/IM messages more as "personal communication" than "data".

codeulike 7y ago
Yes definitely email/slack/and IM. The EU was not kidding around with this. Its a walloping huge piece of legislation with wide reaching implications.

bhelkey 7y ago

From elsewhere in this thread, here is an article from a year ago that dismisses using GDPR to access emails about you. https://thenextweb.com/eu/2018/05/03/no-gdpr-wont-let-you-read-your-bosss-emails-about-you/ https://thenextweb.com/eu/2018/05/03/no-gdpr-wont-let-you-re...

codeulike 7y ago
.. based on what some lawyer said about case law, before the legislation even went live. Here's some discussion about it on the r/gdpr subreddit, the consensus seems to be emails probably are covered. https://www.reddit.com/r/gdpr/comments/8lsgwm/can_you_request_emails_that_include_your_name/ https://www.reddit.com/r/gdpr/comments/8lsgwm/can_you_reques... One person sums it up as: Emails that mention you are likely to count as personal data. However, your right to access that data must be balanced with the right to privacy of anyone else mentioned in the emails. The company would be entitled to redact the emails before sending them, and potentially to refuse the request entirely if that would require excessive effort.