[Board] GPDR

[Ben Caradoc-Davies]

Sure. The GDPR 17 3(e) exemption "for the establishment, exercise or 
defence of legal claims" might be quite important. My (non-voting) +1 
for legal advice from actual lawyers. Our issues are likely to be 
identical to those faced by the Linux, Mozilla, Apache, and Eclipse 
foundations (code bases and mailing lists) so it might be worth reaching 
out to see how they are addressing these issues.

Kind regards,
Ben.

On 17/07/18 09:19, Jody Garnett wrote:
> That is a bit tricky as we are also required to keep a legal record of
> contributions and contributors to confirm the applicability of our open
> source licenses.
> 
> Still this is the kind of ting we can go get legal council on, we do not
> really want to use this list as armchair lawyers. We can use it to think
> about what places we record personal details in our organization.
> --
> Jody Garnett
> 
> 
> On Mon, 16 Jul 2018 at 13:04, Ben Caradoc-Davies <ben at transient.nz> wrote:
> 
>> But that does not address their right (under the GDPR) to
>> retrospectively withdraw their consent, their right to retrospectively
>> correct their personal details, or their right to be forgotten. It does
>> not matter whether we agree with the GDPR, only whether we are compliant
>> with it.
>>
>> On 16/07/18 23:41, Cameron Shorter wrote:
>>> OSGeo has always been clear that our email lists are public and can be
>>> archived (either publicly or privately). By posting to the list, people
>>> should have been aware that they are putting their details onto the
>>> public record.
>>
>> --
>> Ben Caradoc-Davies <ben at transient.nz>
>> Director
>> Transient Software Limited <https://transient.nz/>
>> New Zealand
>> _______________________________________________
>> Board mailing list
>> Board at lists.osgeo.org
>> https://lists.osgeo.org/mailman/listinfo/board
> 

-- 
Ben Caradoc-Davies <ben at transient.nz>
Director
Transient Software Limited <https://transient.nz/>
New Zealand