¿ªÔÆÌåÓý

Data protection


 

I am considering moving the group I manage on YahooGroups to another software base. This potentially would mean releasing names and email addresses to a third party. It thus falls under the remit of the UK Data Protection Act 1984? and then the even more stringent forthcoming EU General Data Protection Regulations (GDPR) from May 2018. In the latter, implied consent (with an opt out for such an action) may not be legal.

How have other list managers dealt with this issue?

Margaret Parker
Leeds, UK


 

Ah, the dreaded GDPR. I assume that Mark, like Yahoogroups, Google and
everybody else in or out of Europe will store our data under the
provisions of GDPR. And presumably some statement in the terms and
conditions to state that they do.

The implications of GDPR for small clubs and societies is still not
that clear, even though May is not long to go (and I could mean May as
in our PM..). Consent may mean just a box on the join form that one has
to tick ('I have read the terms and conditions') or it may demand
something else like an email reply. Who knows, I suspect life will
carry on just as it has done since the computer was invented.

Dave

On 24 Jan 2018 at 3:18, A and M Parker wrote:

I am considering moving the group I manage on YahooGroups to another
software base. This potentially would mean releasing names and email
addresses to a third party. It thus falls under the remit of the UK Data
Protection Act 1984? and then the even more stringent forthcoming EU
General Data Protection Regulations (GDPR) from May 2018. In the latter,
implied consent (with an opt out for such an action) may not be legal.

How have other list managers dealt with this issue?

Margaret Parker
Leeds, UK


 

I think there's a significant difference here between someone joining groups.io
direct and giving their own information, and someone being transferred
automatically from Yahoo groups or elsewhere. The latter could possibly be
problematic under GDPR, and may lead Yahoo to prevent it to protect themselves.
I'll check the wording when I get a few minutes (I've got a PDF copy, but it's
a big document), but I think the main problem would be theirs for passing on
personal details without prior permission.

Jim

On 25 Jan 2018 at 14:29, Dave Sergeant wrote:

Ah, the dreaded GDPR. I assume that Mark, like Yahoogroups, Google and
everybody else in or out of Europe will store our data under the
provisions of GDPR. And presumably some statement in the terms and
conditions to state that they do.

The implications of GDPR for small clubs and societies is still not
that clear, even though May is not long to go (and I could mean May as
in our PM..). Consent may mean just a box on the join form that one has
to tick ('I have read the terms and conditions') or it may demand
something else like an email reply. Who knows, I suspect life will
carry on just as it has done since the computer was invented.

Dave

[excess quote trimmed by moderator]

--
- My thoughts on freedom (needs updating)
- political snippets, especially economic policy
- misc. snippets, some political, some not
Forget Google! I search with which doesn't spy on you


 

Jim,

... and someone being transferred automatically from Yahoo groups or
elsewhere. The latter could possibly be problematic under GDPR, and
may lead Yahoo to prevent it to protect themselves.
It isn't clear how they would prevent it. Short of removing the Manage Members list as a feature.

... but I think the main problem would be theirs for passing on
personal details without prior permission.
While the law might consider Groups.io's transfer agent a "third party" in a way that is distinct from the group moderators (who may also be considered third parties), as a practical matter it is the role of moderator that gives the transfer agent access to the information.

So it would seem a bit odd to hold Yahoo accountable for the transfer of information, even though their systems gave up the info, because those systems were operating under (what would appear to Yahoo as) proper authorization.

Shal


 

On 25 Jan 2018 at 23:03, Shal Farley wrote:

Jim,

> ... and someone being transferred automatically from Yahoo groups or
> elsewhere. The latter could possibly be problematic under GDPR, and
> may lead Yahoo to prevent it to protect themselves.

It isn't clear how they would prevent it. Short of removing the Manage
Members list as a feature.
I agree, There's no obvious solution.

> ... but I think the main problem would be theirs for passing on
> personal details without prior permission.

While the law might consider Groups.io's transfer agent a "third party"
in a way that is distinct from the group moderators (who may also be
considered third parties), as a practical matter it is the role of
moderator that gives the transfer agent access to the information.

So it would seem a bit odd to hold Yahoo accountable for the transfer of
information, even though their systems gave up the info, because those
systems were operating under (what would appear to Yahoo as) proper
authorization.
We could see lawyers having protracted (and lucrative for them) arguments over
that sort of thing.

Jim
--
- My thoughts on freedom (needs updating)
- political snippets, especially economic policy
- misc. snippets, some political, some not
Forget Google! I search with which doesn't spy on you