<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Are we/is the plenary discussing a requirement that CPs make an affirmative effort to dissuade legal persons from submitting personal data , eg encourage them to use email alias for tech contact? If so, then an initial distinction would be necessary. But isn’t that a policy question?<div><font face="Calibri, sans-serif"><span style="font-size: 14.666666984558105px; -webkit-text-size-adjust: auto;"><br></span></font><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> As I said, I do not have an opinion as to whether NIS2 would permit making non personal data publicly accessible via an SSAD request. </o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p><br></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p><br></o:p></p><div dir="ltr">Becky Burr * Sent from my iPad</div><div dir="ltr"><br><blockquote type="cite">On Apr 14, 2021, at 3:34 PM, Mark Svancarek (CELA) <marksv@microsoft.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><p class="MsoNormal"><span style="mso-fareast-language:JA">below.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:JA"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:JA">Finally, I think there is a meaningful distinction between what Melina is advocating (first determine if the person is legal, then look for the edge case where a legal person has submitted personal
data despite being instructed not to do so) and what I think Volker is advocating (disregard legal status entirely and make no effort to ensure that legal entities submit only non-personal data). The intent of these are different and the outcomes will certainly
be different. Given that Melina’s</span></p></div></blockquote></div></body></html>