27 ms·

If you are referring to GDPR then it apply to personal information, not all types of data. I don't think content in a CMS would be considered PII, thus not requ

If you are referring to GDPR then it apply to personal information, not all types of data. I don't think content in a CMS would be considered PII, thus not required to be exported. GDPR export is meant to give customers a way to see what PII is stored, not as a way to export all types of data.

chmod775 5y ago
No. That's incorrect on both counts. That is neither the intent of Article 20 nor the type of data it concerns. https://gdpr-info.eu/art-20-gdpr/ https://gdpr-info.eu/art-20-gdpr/ reads > 1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller [..] https://gdpr-info.eu/art-4-gdpr/ https://gdpr-info.eu/art-4-gdpr/ reads > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); [..]
- ldoughty 5y ago
  Not a lawyer, but my business doesn't sound like a identifiable natural person...
  - siva7 5y ago
    I beg to differ. There is almost no legal business with paying customers that wouldn’t fit under these criteria
  - chmod775 5y ago
    It is not. If you're using some service as a business, you may be out of luck. If however your customers are natural persons, you can migrate their data from a competitor (with their help and/or agreement). Helping with the latter appears to be the point of Hotswap.
- rgj 5y ago
  This is a completely incorrect interpretation of the concept of “personal data”. This is about information _concerning_ an identifiable person. See recital 26, https://gdpr-info.eu/recitals/no-26/ https://gdpr-info.eu/recitals/no-26/
- sleepyhead 5y ago
  > ‘personal data’ means any information relating to an identified or identifiable natural person Exactly. Content in your website is not information relating to an identified or identifiable natural person. GDPR does not require a company to provide export of website content. It does have a requirement to export data they have stored about you though.

chmod775 5y ago

No. That's incorrect on both counts. That is neither the intent of Article 20 nor the type of data it concerns. https://gdpr-info.eu/art-20-gdpr/ https://gdpr-info.eu/art-20-gdpr/ reads > 1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller [..] https://gdpr-info.eu/art-4-gdpr/ https://gdpr-info.eu/art-4-gdpr/ reads > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); [..]

ldoughty 5y ago
Not a lawyer, but my business doesn't sound like a identifiable natural person...
- siva7 5y ago
  I beg to differ. There is almost no legal business with paying customers that wouldn’t fit under these criteria
- chmod775 5y ago
  It is not. If you're using some service as a business, you may be out of luck. If however your customers are natural persons, you can migrate their data from a competitor (with their help and/or agreement). Helping with the latter appears to be the point of Hotswap.
rgj 5y ago
This is a completely incorrect interpretation of the concept of “personal data”. This is about information _concerning_ an identifiable person. See recital 26, https://gdpr-info.eu/recitals/no-26/ https://gdpr-info.eu/recitals/no-26/
sleepyhead 5y ago
> ‘personal data’ means any information relating to an identified or identifiable natural person Exactly. Content in your website is not information relating to an identified or identifiable natural person. GDPR does not require a company to provide export of website content. It does have a requirement to export data they have stored about you though.