My understanding is that the right to be forgotten is primarily focused on the ability of search engines to find information regarding the subject. As far as I have been able to determine, there has not been a single case tried regarding the actual removal of user submitted data, just cases of search engines not sufficiently obfuscating searches pointing to that data. Therefore requests like this might be a case for limiting the mailinglist search engine, but I do not think we should be removing mails from the public archive. This is especially true given the public archive is already sanitised with full email addresses removed. Therefore any other personally identifiable information was shared explicitly by the people in question, which is clearly arguable as a case of 'informed consent' for public data processing. with a mailinglist there is no single 'data processor' - everyone on that list receives a copy of every email. lists.opensuse.org isn't the only archive of our lists..will the user be contacting all of them? Also, how can we properly validate that the person requesting is the person seeking to be forgotten? If the original mails were not GPG signed for example, how do we know that this is not a spurious request from a third party trying to cause harm to the subject of the data by removing the data they willingly shared publicly? Thanks for the FYI - my advice would be users concerned about their right to be forgotten should be contacting search engines to exert that right. If they insist, then they should be contacting the board and we will involve our legal team. Regards, On Sun, 23 Sep 2018 at 21:54, Per Jessen wrote:

Donald Duck wrote:

...

Sehr geehrte Damen und Herren,

aus dem Jahre 2002 befinden sich noch Beiträge in der Mailingliste, die von mir verfasst wurden. Ich möchte Sie darum bitten, die Beiträge zu löschen, bzw. meinen Namen unkenntlich zu machen.

Mit Freundlichen Grüßen

Donald Duck

Hi Board

(I changed the name in the request above)

I usually ignore these requests of "to be forgotten", but every now and then another one turns up. Not frequently, at most a couple of times a year. To put things in perspective, sofar I have not had anyone insist or repeat the request.

In my role as the openSUSE mailing list admin, I could easily accomodate such requests, it's a bit of effort, that's all.

I ignore these for the following reasons -

a) fiddling with mailing list archives, no matter what was promised, is not to be done lightly. (in my opinion).

b) I do not have any official/legal standing in our mostly-ethereal openSUSE organisation nor wrt SUSE.

c) I am a citizen of the EU but I don't live in the EU, where applicable rules may or may not exist (IANAL, I simply do not know).

Just for your information.

I'm contemplating writing a wiki page to explain the situation, to give an easy reply to such requests.

cheers Per

-- Per Jessen, Zürich (25.2°C) Member, openSUSE Heroes

-- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org