Re: [dp-tf] Authorization to publish personal data in the DB (wasRe: [dp-tf] Quadlogy of person proposals)

[Janos Zsako <]

Dear Larisa,

> Let's look if the RIPE Database rules comly with it.
> For example, Section II, "CRITERIA FOR MAKING DATA PROCESSING LEGITIMATE"
>
> 1. Member States shall provide that personal data may be processed only if:
> (a) the data subject has unambiguously given his consent; or
>
> No. admin-c and tech-c are mandatory, without any personal consent
I am not sure this is the right way of putting it.
Yes, admin-c and tech-c _are_ mandatory, however, nobody
says you may (or even worse: you should) publish such data
without the given person's consent. In fact we never did so,
and I am sure many other people did not do so either.
The idea is that you have to find a person who consents to
this, and only publish his/her data.

> So, WHAT MAKES PERSONAL DATA PROCESSING IN THE RIPE DB LEGITIMATE?
I think you are right, the only paragraph that may apply is
(a) above. What we have to make sure is that people act in
accordance with it.

Best regards,
Janos