Timeline for GDPR & EPR regards maintaining email blacklist
Current License: CC BY-SA 4.0
7 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Aug 6, 2020 at 19:39 | comment | added | user32690 | @Sam This would be for Ireland where we are subject to the Irish Data Protection Commission (DPC). Are you using MD5 for hashing ? | |
Aug 6, 2020 at 16:09 | comment | added | Sam_Butler | Notes: (a) while relevant, recitals are not provisions of a Regulation; (b) Directive 2002/58/EC is not relevant, but the enabling act in the applicable jurisdiction may be; (c) a hash is only personal data if it can be combined with other data the controller has, to identify a specific natural person, so if you get rid of the email address but retain the hash, the hash by itself is not personal data - I have implemented exactly this solution for the same problem; and (d) the right to erasure is not absolute and has exceptions/exemptions including national derogations. Where are you? | |
Jul 29, 2020 at 7:32 | comment | added | Lag | related law.stackexchange.com/questions/37882/… | |
Jul 28, 2020 at 22:29 | history | became hot network question | |||
Jul 28, 2020 at 15:05 | answer | added | Lag | timeline score: 8 | |
Jul 28, 2020 at 15:01 | answer | added | SJuan76 | timeline score: 17 | |
Jul 28, 2020 at 14:29 | history | asked | user32690 | CC BY-SA 4.0 |