My understanding is that the right to be forgotten is primarily
focused on the ability of search engines to find information regarding
the subject.
As far as I have been able to determine, there has not been a single
case tried regarding the actual removal of user submitted data, just
cases of search engines not sufficiently obfuscating searches pointing
to that data.
Therefore requests like this might be a case for limiting the
mailinglist search engine, but I do not think we should be removing
mails from the public archive.
This is especially true given the public archive is already sanitised
with full email addresses removed. Therefore any other personally
identifiable information was shared explicitly by the people in
question, which is clearly arguable as a case of 'informed consent'
for public data processing.
with a mailinglist there is no single 'data processor' - everyone on
that list receives a copy of every email. lists.opensuse.org isn't the
only archive of our lists..will the user be contacting all of them?
Also, how can we properly validate that the person requesting is the
person seeking to be forgotten? If the original mails were not GPG
signed for example, how do we know that this is not a spurious request
from a third party trying to cause harm to the subject of the data by
removing the data they willingly shared publicly?
Thanks for the FYI - my advice would be users concerned about their
right to be forgotten should be contacting search engines to exert
that right. If they insist, then they should be contacting the board
and we will involve our legal team.
Regards,
On Sun, 23 Sep 2018 at 21:54, Per Jessen
Donald Duck wrote:
Sehr geehrte Damen und Herren,
aus dem Jahre 2002 befinden sich noch Beiträge in der Mailingliste, die von mir verfasst wurden. Ich möchte Sie darum bitten, die Beiträge zu löschen, bzw. meinen Namen unkenntlich zu machen.
Mit Freundlichen Grüßen
Donald Duck
Hi Board
(I changed the name in the request above)
I usually ignore these requests of "to be forgotten", but every now and then another one turns up. Not frequently, at most a couple of times a year. To put things in perspective, sofar I have not had anyone insist or repeat the request.
In my role as the openSUSE mailing list admin, I could easily accomodate such requests, it's a bit of effort, that's all.
I ignore these for the following reasons -
a) fiddling with mailing list archives, no matter what was promised, is not to be done lightly. (in my opinion).
b) I do not have any official/legal standing in our mostly-ethereal openSUSE organisation nor wrt SUSE.
c) I am a citizen of the EU but I don't live in the EU, where applicable rules may or may not exist (IANAL, I simply do not know).
Just for your information.
I'm contemplating writing a wiki page to explain the situation, to give an easy reply to such requests.
cheers Per
-- Per Jessen, Zürich (25.2°C) Member, openSUSE Heroes
-- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org