<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Not to derail the conversation here and turn this into a GDPR
crash course. But, I think the below is relevant regarding the
current discussion. <br>
<br>
<a class="moz-txt-link-freetext" href="https://gdpr-info.eu/chapter-1/">https://gdpr-info.eu/chapter-1/</a><br>
<br>
Now we discussed purposes in the past regarding scientific or
historical whois research.<br>
But how does that work under the GDPR?<br>
<a class="moz-txt-link-freetext" href="https://gdpr-info.eu/art-89-gdpr/">https://gdpr-info.eu/art-89-gdpr/</a><br>
<br>
So this gives us some more information on how that can work,
though one has to keep in mind the derogations on a member state
level. <br>
I use
<a class="moz-txt-link-freetext" href="https://www.twobirds.com/en/hot-topics/general-data-protection-regulation/gdpr-tracker">https://www.twobirds.com/en/hot-topics/general-data-protection-regulation/gdpr-tracker</a>
to keep track regarding the derogations on a member state level
(EU). But there are more trackers out there (ping me off list). <br>
<br>
Again this is a straightforward tool to zoom in on the relevant
articles and suitable recitals under the GDPR. <br>
And if we as a group want to make the purposes to work for
processing personal data I think it helps when look at those
articles, or we will make the wrong assumptions. And keep in mind
the GDPR originated from the EU 95/46 directives, and these are
based on some really old data protection principles. I understand
the desire to discuss our purposes, and it is natural we feel they
are justified due to its history, but we need to get prepped for
the many data protection laws that are in effect and make sure
they match with the law. <br>
</p>
<p>Hope this helps, <br>
<br>
Theo Geurts<br>
</p>
<br>
<div class="moz-cite-prefix">On 7-2-2018 19:15, Ayden Férdeline
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:eljO_zy0jK6FYtnkbA1vM1ZiwXNLU22ZwsxGSPT4WhdTKcmbAjMNW89kG7G7utb7cMn8KswdeyL9eAaYrj7QJql0QnrwGVlYxrOf8y3CGrQ=@ferdeline.com">
<div>Thanks for this explanation, Sam and Tapani. On this basis I
am most comfortable with the existing text; that is, any purpose
must satisfy at least one 'legal basis' for processing.<br>
</div>
<div><br>
</div>
<div>Kind regards,<br>
</div>
<div>Ayden <br>
</div>
<div class="protonmail_signature_block">
<div class="protonmail_signature_block-proton
protonmail_signature_block-empty"><br>
</div>
</div>
<div><br>
</div>
<div>-------- Original Message --------<br>
</div>
<div> On 7 February 2018 4:53 PM, Sam Lanfranco
<a class="moz-txt-link-rfc2396E" href="mailto:sam@lanfranco.net"><sam@lanfranco.net></a> wrote:<br>
</div>
<div> <br>
</div>
<blockquote class="protonmail_quote" type="cite">
<p>Thanks Tapani,<br>
</p>
<div>I will extract from your longer message.<br>
</div>
<div> I deliberately kept my brief and less technical.<br>
</div>
<div> I think we are in agreement here and I support your
position.<br>
</div>
<div> <br>
</div>
<div> <br>
</div>
<div class="moz-cite-prefix"><span class="colour"
style="color:#660000">On 2/7/2018 1:07 AM, Tapani Tarvainen
wrote:<br>
<br>
The key distinction, as I understand it, is that "lawful"
would be<br>
defined by the negative, everything that some law does not
prohibit, </span></div>
<div><span class="colour" style="color:#660000">where as "legal
basis" is defined by the positive, only things whose <br>
justification can be explicitly derived from law. <br>
<br>
<......><br>
<br>
So I would prefer "legal basis" specifically in this sense:
that any processing<br>
would have to be explicitly based on one of the criteria,
or bases, as listed <br>
in GDPR Article 6, or similar explicit justification in
other data protection legislation. <br>
<br>
</span></div>
</blockquote>
<div><br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
gnso-rds-pdp-wg mailing list
<a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a>
<a class="moz-txt-link-freetext" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></pre>
</blockquote>
<br>
</body>
</html>