On 27 May 2018 at 22:32, David Gerard <dgerard(a)gmail.com> wrote:
I'm a big fan of the GDPR and why it had to be
created. (I'm doing a lot of
the bureaucratic work on the tech side at the day job and am getting very
used to thinking of ways something could constitute Personally Identifying
Information.)
But I'm wondering how we'll approach it for the Wikimedia sites. Not just
the log data - but the content.
Wave around article 85 a lot.
We already have problems with Right To Be Forgotten,
and well-cited content
being removed from the search engines.
What do we have in place to deal with this when - not if - we get GDPR
requests to remove information about a person from the site?
Wave around article 85 a lot. The content is a fairly minor problem.
Trying to cleanup after users who've inserted their personal
information into talk pages presents more of an issue.
I don't mean just the letter of the law, in the EU
or the US - I mean also,
how we can handle this *right*. Because there are multiple competing
legitimate interests here, and the editing communities tend to take a lot
more care than they're strictly required to by law, because we are here to
get things right. (This is why our DMCA numbers are ridiculously low for a
top 10 site, for example.)
At the moment all we can really do is wait and see how it develops.
This is why you have sites trying to block the EU even if they are not
aware of any issues. 4% of turnover and no caselaw?
I'm not seeing a rush at OTRS yet but that is probably going to be
ground zero on working out what to do with this stuff.
--
geni