Re: [dp-tf] Quadlogy of person proposals

["Larisa A. Yurkina" <]

On Thu, 14 Jun 2007, Janos Zsako wrote:

Hi,

> Dear Manfredo,
>
> > So we've to return back in the task. Until we can get the appropriate
> > authorization, we cannot publish any personal data. We need not to stop
> > people to write into the database, even if this is not safe, but we
> > do_need to stop people to read from the database what (any data) not
> > properly authorized.

I wonder what authorization is from the point of view of the law.

In Russian DP act it is said, any personal data cannot be published without written
consent of the data subject. The 'written consent' consists of 6 points
including (besides name-address-tel etc) passport No with date of issue,  aim of
processing data, list of data which can be processed, list of operations the data
should undergo, terms of the consent given.

Had it been said that written consent could be replaced by authorization scheme,
it would be OK. But it had not.


>
> Correct. This is what may eventually happen in the worst case, if DP
> people (authorities) ask us to do that.
>
> However, I do not think we should target to have this kind of behaviour,
> as this would render the RIPE DB useless, like a Write Only memory. :)
>
> Best regards,
> Janos
>
>


With respect,
Larisa Yurkina
---
RIPN Registry center
-----