4 ms·

The good thing about GDPR is that these keyservers must delete your info after some time unless you periodically renew your consent.

TylerE 3y ago
Good thing every company and web server on the planet is in the EU! How else would 10 people make lazy GDPR posts on everything vaguely related?
- 0x073 3y ago
  Even if the web servers are not in EU they must use GDPR if they target EU users.
  - rrr_oh_man 3y ago
    Good look enforcing GDPR in Panama…
  - jazzyjackson 3y ago
    if a tree falls in the woods without any geo-ip blocking, does it have to comply with GDPR?
hyperman1 3y ago
Where in the GDPR do you find this 'some time'? AFAIK, and I might be wrong here, you do have the right to be forgotten - art 17. But there is no need to periodically renew consent. As long as the period for consent is understood and is relatable for the reason of the consent, it can be basically for ever. In this case, that period seems to be 'until he withdraws his consent' and that seems fine by my reading of the GDPR. https://gdpr-info.eu/art-17-gdpr/ https://gdpr-info.eu/art-17-gdpr/
- yau8edq12i 3y ago
  https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/principles-gdpr/how-long-can-data-be-kept-and-it-necessary-update-it_en https://commission.europa.eu/law/law-topic/data-protection/r... > Your company/organisation should establish time limits to erase or review the data stored. https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e40-1-1 https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL... > In order to ensure that the personal data are not kept longer than necessary, time limits should be established by the controller for erasure or for a periodic review. Have you not gotten, over the past few years, emails from services you no longer use and probably forgot that you ever setup an account for, informing you that they will delete your account if you don't use it soon? It's because of the GDPR.
  - mcv 3y ago
    "Not longer than necessary" can still mean "permanently" if it's information that remains relevant permanently. And I think that's the case here.
upofadown 3y ago
In the same way that any blockchain based system must delete your info after some time...

TylerE 3y ago

Good thing every company and web server on the planet is in the EU! How else would 10 people make lazy GDPR posts on everything vaguely related?

0x073 3y ago
Even if the web servers are not in EU they must use GDPR if they target EU users.
- rrr_oh_man 3y ago
  Good look enforcing GDPR in Panama…
- jazzyjackson 3y ago
  if a tree falls in the woods without any geo-ip blocking, does it have to comply with GDPR?

hyperman1 3y ago

Where in the GDPR do you find this 'some time'? AFAIK, and I might be wrong here, you do have the right to be forgotten - art 17. But there is no need to periodically renew consent. As long as the period for consent is understood and is relatable for the reason of the consent, it can be basically for ever. In this case, that period seems to be 'until he withdraws his consent' and that seems fine by my reading of the GDPR. https://gdpr-info.eu/art-17-gdpr/ https://gdpr-info.eu/art-17-gdpr/

yau8edq12i 3y ago
https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/principles-gdpr/how-long-can-data-be-kept-and-it-necessary-update-it_en https://commission.europa.eu/law/law-topic/data-protection/r... > Your company/organisation should establish time limits to erase or review the data stored. https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e40-1-1 https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL... > In order to ensure that the personal data are not kept longer than necessary, time limits should be established by the controller for erasure or for a periodic review. Have you not gotten, over the past few years, emails from services you no longer use and probably forgot that you ever setup an account for, informing you that they will delete your account if you don't use it soon? It's because of the GDPR.
- mcv 3y ago
  "Not longer than necessary" can still mean "permanently" if it's information that remains relevant permanently. And I think that's the case here.

upofadown 3y ago

In the same way that any blockchain based system must delete your info after some time...