[ncc-services-wg] personal data in the NCC

On 20 Oct 2010, at 10:25, Sergey Myasoedov wrote:

> RIPE NCC should have data protection procedures

It does. This is compulsory for any organisation in the EU that holds  
Personal Data. The NCC is legally obliged to follow the EU Directives  
on Privacy and Data Protection (primarily 95/46/EC but also parts of  
97/66/EC and 2002/58/EC) and how these are enacted in Dutch law.  
Although I'm not a lawyer, I expect that the EU and Dutch legislation  
in this area will be compatible with Russian data protection law.

> I tried to find some statements on data protection in the RIPE NCC  
> or on any guarantee of confidentiality, but no such information  
> found in the standard service agreement or any policy documents.

Strange. It should be public somewhere.

BTW, in general it's usually more of a problem exporting Personal Data  
from the EU than it is to send that Personal Data there