<div dir="ltr">What Volker said. To add another layer - I'm not sure that "confusing" is where I land on this however - if anything it's rather convincing as to the seriousness of ensuring balance. An EU or member state law may impart a specific permission or authorization for such processing - or alternatively make it a legal obligation for controllers in that jurisdiction to process data in such instances, but the key point is that even where you make it the 'law' to automate - if that automation is not in line with the principles of proportionality, i.e. balance of the goal vs the impact to the rights of those impacted and transparency (with many shades of Art 25), then even that "legal basis" will fall. All comes down to the fact that data privacy is part of a basic human right, emanating specifically from Art 8 of the ECHR, and can't be legislated away; it's good (not to mention of some relief) to see the Courts are absolutely willing to censure governments who overstep their powers vis a vis data privacy. <div><br></div><div>I think we continue to be prudent in our own considerations to remember that our policy will be built on considerably less stable foundations than actual 'legislative' prerogative. </div><div><br></div><div>Alan</div><div><br></div><div><br></div><div><br><div><br><div><br></div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><table style="padding:0px;margin:10px 0px;border:none"><tbody><tr><td style="vertical-align:middle;padding:0px 7px 0px 0px"><a href="http://donuts.domains" rel="nofollow" target="_blank"><img alt="Donuts Inc." height="75" src="https://storage.googleapis.com/signaturesatori/customer-C02zzlf7k/images/-54f9d8ac97e7f575bf497d10ac1f1aafafddf8afceab5f269d49034f01b3217b.png" width="75"></a></td><td style="vertical-align:middle;padding:0px 7px 0px 0px;text-align:left">
<div style="font-family:tahoma,sans-serif;font-size:14px;line-height:17px;font-weight:bold;color:black"><span style="font-size:12px"><span style="font-family:arial,helvetica,sans-serif"><span style="color:rgb(51,51,51)">Alan Woods</span></span></span></div>
<div><span style="font-size:12px"><span style="font-family:arial,helvetica,sans-serif"><span style="color:rgb(51,51,51)">Senior Compliance & Policy Manager, Donuts Inc.</span></span></span>
<hr><div><font color="#333333" face="arial, helvetica, sans-serif"><span style="font-size:11px">Suite 1-31, </span></font></div><div><font color="#333333" face="arial, helvetica, sans-serif"><span style="font-size:11px">Block D, Iveagh Court</span></font></div><div><font color="#333333" face="arial, helvetica, sans-serif"><span style="font-size:11px">Harcourt Road</span></font></div></div><div><font color="#333333" face="arial, helvetica, sans-serif"><span style="font-size:11px">
Dublin 2, County Dublin</span></font><br style="color:rgb(214,214,214);font-family:"open sans";font-size:12px;background-color:rgb(34,34,34)"><font color="#333333" face="arial, helvetica, sans-serif"><span style="font-size:11px">
Ireland</span></font><br>
<span style="font-size:11px"><span style="font-family:arial,helvetica,sans-serif"></span></span><br>
<span style="line-height:36px"><a href="https://www.facebook.com/donutstlds" rel="nofollow" target="_blank"><img src="http://storage.googleapis.com/signaturesatori/icons/facebook.png"></a> <a href="https://twitter.com/DonutsInc" rel="nofollow" target="_blank"><img src="http://storage.googleapis.com/signaturesatori/icons/twitter.png"></a> </span><span style="font-size:14px"><a href="https://www.linkedin.com/company/donuts-inc" rel="nofollow" target="_blank"><img src="http://storage.googleapis.com/signaturesatori/icons/linkedin.png"></a></span></div>
</td></tr></tbody></table><br>
</div><div><span style="font-size:12pt;font-family:Cambria,serif">Please NOTE: This electronic message, including any attachments, may include privileged, confidential and/or inside information owned by Donuts Inc. . </span><span style="font-size:12pt;font-family:Cambria,serif">Any distribution or use of this communication by anyone other than the intended recipient(s) is strictly prohibited and may be unlawful. If you are not the intended recipient, please notify the sender by replying to this message and then delete it from your system. Thank you.</span><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Feb 19, 2020 at 9:26 AM Volker Greimann <<a href="mailto:vgreimann@key-systems.net">vgreimann@key-systems.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<p>Yeah, but this is governments who have a significantly larger
ability to take actions that may impact private citizens rights.
We are private sector acting without any legal basis other than
what GDPR permits. We should not compare what appleas can do to
what oranges can.</p>
<p>Volker</p>
<p><br>
</p>
<div>Am 18.02.2020 um 19:36 schrieb Mark
Svancarek (CELA) via Gnso-epdp-team:<br>
</div>
<blockquote type="cite">
<div>
<p class="MsoNormal">I think it’s an interesting case.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">From the article:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:Helvetica,sans-serif;color:rgb(26,26,26);background:white">On
Wednesday, the Hague district court agreed with that [by
collating swaths of data on entire neighborhoods, SyRI
contravened the right to a private life guaranteed under
European Human Rights Law], saying that it was legitimate
for the government to use technology to address fraud, but
that SyRI was too invasive.
</span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">There is legal or similarly significant
impact, so it’s clearly covered by Article 22, but the court
still seems to have comfort with some level of automation.
It’s confusing.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0in 0in">
<p class="MsoNormal"><b>From:</b> Gnso-epdp-team
<a href="mailto:gnso-epdp-team-bounces@icann.org" target="_blank"><gnso-epdp-team-bounces@icann.org></a>
<b>On Behalf Of </b>Mueller, Milton L<br>
<b>Sent:</b> Saturday, February 15, 2020 3:01 PM<br>
<b>To:</b> EPDP <a href="mailto:gnso-epdp-team@icann.org" target="_blank"><gnso-epdp-team@icann.org></a><br>
<b>Subject:</b> [EXTERNAL] [Gnso-epdp-team] On the
legality of algorithmic decision making<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Here is an interesting article for anyone
here who still thinks that lawful balancing tests can be done
by algorithms.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.wired.com%2Fstory%2Feurope-limits-government-algorithm-us-not-much%2F&data=02%7C01%7Cmarksv%40microsoft.com%7C8dd87581a07e4624ecd808d7b26af094%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637174044681731716&sdata=PmcZTtjGgKWHZqUG97t3r3Zozt%2BmOFd6KJuB0voV4%2F8%3D&reserved=0" target="_blank">https://www.wired.com/story/europe-limits-government-algorithm-us-not-much/</a>
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Dr. Milton L Mueller<u></u><u></u></p>
<p class="MsoNormal">Georgia Institute of Technology<u></u><u></u></p>
<p class="MsoNormal">School of Public Policy<u></u><u></u></p>
<p class="MsoNormal"><img style="width: 2.45in; height: 0.975in;" id="gmail-m_-9085817841643169613Picture_x0020_1" src="cid:1705cfecc3b5b16b21" alt="IGP_logo_gold block" width="235" height="94" border="0"><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Gnso-epdp-team mailing list
<a href="mailto:Gnso-epdp-team@icann.org" target="_blank">Gnso-epdp-team@icann.org</a>
<a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a>
_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</pre>
</blockquote>
<div>-- <br>
Volker A. Greimann<br>
General Counsel and Policy Manager<br>
<strong style="border-bottom:3px solid rgb(92,70,181)">KEY-SYSTEMS GMBH</strong><br>
<br>
T: +49 6894 9396901<br>
M: +49 6894 9396851<br>
F: +49 6894 9396851<br>
W: <a href="http://www.key-systems.net" target="_blank">www.key-systems.net</a><br>
<br>
Key-Systems GmbH is a company registered at the local court of
Saarbruecken, Germany with the registration no. HR B 18835<br>
CEO: Alexander Siffrin<br>
<br>
Part of the CentralNic Group PLC (LON: CNIC) a company registered
in England and Wales with company number 8576358.</div>
</div>
_______________________________________________<br>
Gnso-epdp-team mailing list<br>
<a href="mailto:Gnso-epdp-team@icann.org" target="_blank">Gnso-epdp-team@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a><br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div>