Policy-Discussion

[Karl-Heinz Gödderz <CAcert AT GuKK-Online.de>]

To the members of policy group and arbitration group,

Etienne wrote the forwarded mail to cacert community list, but IMHO it belongs also/primarily to policy group and arbitration group.

what do you say about this matter, do we have to change something in our policies,

do we have all things requested by the GDPR documented properly,

can we get / do we need from arbitration a ruling for support to fulfil the new right to be informed about the data stored. (Art. 15 GDPR Right of access by the data subject) https://gdpr-info.eu/art-15-gdpr/

like we have for deletion (Art. 17 GDPR Right to erasure (‘right to be forgotten’)) https://gdpr-info.eu/art-17-gdpr/

kind regards, Karl-Heinz

forwarded mail from Etienne and some answers from cacert community list.


-------- Weitergeleitete Nachricht -------- Betreff: General Data Protection Regulation (EU) 2016/679 Datum: Thu, 22 Mar 2018 23:25:30 +0000 (UTC) Von: eruedin AT cacert.org Antwort an: cacert AT lists.cacert.org An: cacert AT lists.cacert.org

At who it may concern

The General Data Protection Regulation (EU) 2016/679 or GDPR regime extends
the scope of the EU data protection law to all foreign companies processing
data of EU residents. Even CAcert Inc (as operator for the CAcert community)
is based in New South Wales, it is probabely concerned, as CAcert has
"clients" living in the European Union.

As I am neither living in the EU, and have neither some experience with  EU
rules and laws, I am looking for people that could help to find out in witch
points CAcert is concerned and witch steps have to be done.

Maybe, you are in a EU based association and did allready some stuff on this
way? Or you did similar things in your company? Or you are a lawer? Or ....?

If you can some advice or help - even a little bit -, please replay here or
directly to me. Thank you.

Best regards
Etienne Ruedin
Secretary of CAcert Inc.


--
CAcert Inc. is an incorporated non-profit association registered with New
South Wales (NSW), Australia. - It was incorporated by 24 July 2003, with the
full association name CAcert Incorporated under the Incorporation No
INC9880170.

answer from Guy https://lists.cacert.org/wws/arc/cacert/2018-03/msg00001.html

here are some working background got on the site:
https://europa.eu/youreurope/citizens/consumers/internet-telecoms/data-protection-privacy/index_fr.htm
for information the text translated by software

answer from Jason https://lists.cacert.org/wws/arc/cacert/2018-03/msg00002.html

It seems to be written in relatively clear language (in English) but
also plenty of detail if you want to delve into it a bit.

Main Site
http://gdprandyou.ie/

GDPR document
https://www.dataprotection.ie/docimages/documents/The%20GDPR%20and%20You.pdf

More formal information online
https://www.dataprotection.ie/docs/GDPR/1623.htm

answer from Bert more an abstract https://lists.cacert.org/wws/arc/cacert/2018-03/msg00003.html

 

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature