<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I think they are compliant - you actively sign up to the lists that you want to subscribe and you have an option to unsubscribe or delete your account completely. <div class=""><br class=""></div><div class="">We will need to check whether deleting an account removes the email address etc. My view fwiw is that we have no obligation to purge archived emails but I think that should be made clear in our privacy policy - which we need to write!</div><div class=""><br class=""></div><div class="">Do you fancy getting involved to help get this done?<br class=""><div class="">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">______<br class="">Steven<br class=""><br class=""></span>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 16 Jul 2018, at 10:39, Ben Caradoc-Davies <<a href="mailto:ben@transient.nz" class="">ben@transient.nz</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">What about email archives? They are not self-service.<br class=""><br class="">Do we have an obligation to purge archived emails or correct names or email addresses in archives on requests?<br class=""><br class="">Do we have an obligation to report all personal information held by OSGeo on request? Should OSGeo have a procedure for handling such requests?<br class=""><br class="">Kind regards,<br class="">Ben.<br class=""><br class="">On 16/07/18 18:00, Jody Garnett wrote:<br class=""><blockquote type="cite" class="">Advice would be very much appreciated.<br class="">My own preference is to be clear that OSGeo is largely self-serve, and if<br class="">we document steps to sign up for something we also document the steps to<br class="">un-sign up for something.<br class="">I think OSGeo has one mail chimp account used by marketing and geoforall -<br class="">but it am not sure how heavily it is used?<br class="">--<br class="">Jody Garnett<br class="">On Sat, 14 Jul 2018 at 10:16, stevenfeldman <<a href="mailto:shfeldman@gmail.com" class="">shfeldman@gmail.com</a>> wrote:<br class=""><blockquote type="cite" class="">Jody<br class=""><br class="">I think the Board needs to take a more proactive approach to GDPR. This is<br class="">quite significant legislation and we should ensure that we have taken<br class="">"reasonable steps" to audit our personal data holdings and ensure we have<br class="">compliant processes.<br class=""><br class="">The UK Information Commissioner's Office has a good intro to GDPR at<br class=""><br class=""><a href="https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/" class="">https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/</a><br class="">and a simple checklist tool at<br class=""><br class="">https://ico.org.uk/for-organisations/resources-and-support/data-protection-self-assessment/<br class="">(each EU country will have similar info but this is in English)<br class=""><br class="">MailChimp has good tools for getting mail-list approval and providing<br class="">unsubscribe options. Do we have an OSGeo account or is usage less formal<br class="">across the regions?<br class=""><br class="">I'm sure several of our EU members have already worked through GDPR with<br class="">their organisations and could provide advice<br class=""><br class="">Cheers<br class=""><br class="">Steven<br class=""><br class=""><br class=""><br class="">--<br class="">Sent from: http://osgeo-org.1560.x6.nabble.com/OSGeo-Board-f3713809.html<br class="">_______________________________________________<br class="">Board mailing list<br class="">Board@lists.osgeo.org<br class="">https://lists.osgeo.org/mailman/listinfo/board<br class=""></blockquote>_______________________________________________<br class="">Board mailing list<br class=""><a href="mailto:Board@lists.osgeo.org" class="">Board@lists.osgeo.org</a><br class="">https://lists.osgeo.org/mailman/listinfo/board<br class=""></blockquote><br class="">-- <br class="">Ben Caradoc-Davies <<a href="mailto:ben@transient.nz" class="">ben@transient.nz</a>><br class="">Director<br class="">Transient Software Limited <<a href="https://transient.nz/" class="">https://transient.nz/</a>><br class="">New Zealand<br class=""></div></div></blockquote></div><br class=""></div></body></html>