Re: Whois vs GDPR, latest news

[Matthew Kaufman <matthew () matthew at>]

On Mon, May 21, 2018 at 7:03 PM Jason Hellenthal <jhellenthal () dataix net>
wrote:

> Mind pointing out where in the GDPR that it directly relates to these
> types of mail services ?
Like most regulations, it doesn’t call out a specific thing like email or
social networking sites or ecommerce. But it follows quite directly:

GDPR covers processing of personal data of EU subjects.

Email addresses are personal data.

Article 14 says that if you receive personal data but not directly from the
subject, you must notify the subject and provide them with a variety of
information.

There are exceptions for things like scientific studies and archival
purposes... but not because it is simply inconvenient to do so.

That this probably just isn’t going to happen for any email servers or
search engine crawlers doesn’t mean the law doesn’t say what it says.

Matthew