[gnso-rds-pdp-wg] The principle of consent

[Ayden Férdeline]

Hi Tom,

Stephanie sent to this list yesterday, when asked by Chuck if thin data elements constitute personal data: "Definitionally, yes... That does not mean we need to protect it, it means we have to examine it in terms of DP law... If you want to figure out whether you have to protect something or not, do a privacy impact assessment." I think this could be useful in answering your question.

Best wishes,

Ayden Férdeline
[linkedin.com/in/ferdeline](http://www.linkedin.com/in/ferdeline)

-------- Original Message --------
Subject: Re: [gnso-rds-pdp-wg] The principle of consent
Local Time: June 1, 2017 5:24 PM
UTC Time: June 1, 2017 4:24 PM
From: tom.lancaster.sec at gmail.com
To: Volker Greimann <vgreimann at key-systems.net>
gnso-rds-pdp-wg at icann.org

I genuinely can't forsee a situation where these laws are enforcable, especially in an edgecase (in terms of whether the data is even PII) such as those discussed so far, when you compare it with the situations any number of companies, websites etc will be in a result of this law.

For example, you may not have submitted to it, but I guess you should be raising a legal case against Facebook for publishing your PII without your consent:

https://www.facebook.com/vgreimann
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-rds-pdp-wg/attachments/20170601/53312d8a/attachment.html>