nanog mailing list archives

Re: Whois vs GDPR, latest news


From: "K. Scott Helms" <kscotthelms () gmail com>
Date: Wed, 23 May 2018 09:06:46 -0400

Of course not, but do you really want to be sued?  Even if the US courts
decline to accept GDPR cases, which is not at all a given since we have a
long history of bilateral enforcement, it costs money to deal with and I
don't want to worry that I'm going to fly one day to a country that will
enforce civil penalties.

While I don't tell most people or companies to worry if they only do
business in the US I also don't think it's a good idea to simply thumb your
nose at the EU regulators.  Some North American direct marketing and data
collection firms are definitely going to get a rude, and expensive,
awakening despite not having any EU operations.

On Wed, May 23, 2018 at 8:49 AM, Mike Hammett <nanog () ics-il net> wrote:

*shrugs* Me hurting the EU's feelings is rather low on the list of things
I care about.




-----
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com

Midwest-IX
http://www.midwest-ix.com

----- Original Message -----

From: "K. Scott Helms" <kscotthelms () gmail com>
To: "Mike Hammett" <nanog () ics-il net>
Cc: "NANOG list" <nanog () nanog org>
Sent: Wednesday, May 23, 2018 7:46:19 AM
Subject: Re: Whois vs GDPR, latest news


Sadly this isn't true. While I doubt the EU regulators are going to come
head hunting for companies any time soon they do have mechanisms in place
to sanction companies who don't do business in the EU and the scope is
clearly intended to reach where ever the data of EU natural persons is
being held.


https://gdpr-info.eu/art-3-gdpr/



I asked one of the EU regulators at RSA how they intended to enforce GDPR
violations on businesses that don't operate in their jurisdiction and
without hesitation he told me they'd use civil courts to sue the offending
companies.


On Wed, May 23, 2018 at 8:36 AM, Mike Hammett < nanog () ics-il net > wrote:


If you don't have operations in the EU, you can not so politely tell the
EU to piss off.




-----
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com

Midwest-IX
http://www.midwest-ix.com

----- Original Message -----

From: "Matthew Kaufman" < matthew () matthew at >
To: "Fletcher Kittredge" < fkittred () gwi net >
Cc: "NANOG list" < nanog () nanog org >
Sent: Monday, May 21, 2018 8:07:15 PM
Subject: Re: Whois vs GDPR, latest news



On Mon, May 21, 2018 at 1:56 PM Fletcher Kittredge < fkittred () gwi net >
wrote:

What about my right to not have this crap on NANOG?



What about the likely truth that if anyone from Europe mails the list,
then
every mail server operator with subscribers to the list must follow the
GDPR Article 14 notification requirements, as the few exceptions appear to
not apply (unless you’re just running an archive).

Matthew








Current thread: