Urban75 Home About Offline BrixtonBuzz Contact

GDPR (General Data Protection Regulation). More red tape!

Hmmm. I think it's not so much the email address as the posts the person has made. Depending on what a person has posted, it may amount to personal data because there's potential for a person to be identifiable. If the person has only posted about, say, Star Trek, it's unlikely to be personal data, but if they have also mentioned their home town and cavorted on the naked thread...
Obviously, I always honour requests to remove posts which clearly identify a poster's real life identity if it's causing them problems, but even when people post up lots of personal information in k&s, it's rare to be able to connect that content with a real life living person - even for a mod who can access a bit more 'back end' stuff.

(I know this from the times I've had to deal with suicide threats).
 
So I responded:

Sorry, what information do we hold that publicly identifies you in any way
Got this in return:
It doesn't matter if it publicly identifies me or not, any personal data that you hold in relation to this email address I would like to be removed as per under Article 17 under GDPR.

Please remove it from any systems you may have the information on.
I've checked. He is registered under a silly name - let's call him 'sludgeface' - with an address of [email protected]. He has made no posts.
 
Obviously, I always honour requests to remove posts which clearly identify a poster's real life identity if it's causing them problems, but even when people post up lots of personal information in k&s, it's rare to be able to connect that content with a real life living person - even for a mod who can access a bit more 'back end' stuff.

(I know this from the times I've had to deal with suicide threats).
I post on another board where quite a number of posters have been stalked by someone with a grudge, including employers contacted etc, I think you'd be surprised how easy it can be for someone to follow the trail of clues left by people on forums.

I think that unless you can be sure that none of the posts contain personal data, legally you likely have to accept this request - eg delete the user and all of their posts.
 
Sorry - didn't see that they have made no posts - well just the user and and associated data eg email, IP address etc then
But I'm curious if this actually qualifies as we hold nothing more than his email address (and no IP address either as he registered a few years back).
 
But I'm curious if this actually qualifies as we hold nothing more than his email address (and no IP address either as he registered a few years back).
No, it doesn't. My martial arts org has had to deal with this stuff over the last year with some mad overreaching of certain people regarding what information can be stored and who should be allowed to see it. Certain people were claiming that records of payments made to them by the org were personal data that should be protected (not the address, email, bank account, or anything like that, just the name and the amount paid to them). They were wrong.

If you just hold his email address, you actually don't have anything. Not even a name to go with the address. He's talking out of his arse. You have someone's email address if they send you an email. I've got thousands. :D
 
Back
Top Bottom