4 ms·
If you do not have resources to take care of PI then perhaps do not gather and store it in the first place? Forums do not necessarily require personal informat
by bornelsewhere 6y ago
If you do not have resources to take care of PI then perhaps do not gather and store it in the first place?
Forums do not necessarily require personal information to exist.
- j-pb 6y agoExcept that a commonly used user name is already "personal information". And your eMail address you've used to register to the forum. And the IP address that you use to access the forum. AND EVEN THE RANDOM UUID THAT YOU ASIGN TO USERS ON YOUR FORUM BECAUSE YOU'VE GIVEN UP AND ONLY IDENTIFY USERS BY THAT AND THEIR PASSWORD. In effect everything where a user has to input something instead of being just a recipient, or where the user is connected to any persistent identifier contains PI according to GDPR. Say bye bye to most kinds of technical server logs used to debug stuff, to your database, and storing stuff in general. The only way to be truly GDPR compliant if you followed the law to the letter would be to just provide TV and Teletext service via radio waves.