-----BEGIN PGP SIGNATURE-----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=iHum
-----END PGP SIGNATURE-----
On 07/03/18 20:43, Jeremy Bicha wrote:
> Notably, in the very first email in this thread, Will Cooke
> specifically said IP addresses will never be stored with this data.
That doesn't mean it's not collected and so can be ignored. The
"collected" data must be "processed" to remove the IP address (unless
you can access a TCP/IP-based web service without revealing your IP
address?).
> In my opinion, the basic hardware data collection being proposed is
> completely insufficient to identify people.
Respectfully, GDPR compliance isn't based on opinions. It needs to be
studied and processes implemented to ensure compliance, i.e. it needs to
be taken seriously, even for statistical data:
"(162) Where personal data are processed for statistical purposes, this
Regulation should apply to that processing. Union or Member State law
should, within the limits of this Regulation, determine statistical
content, control of access, specifications for the processing of
personal data for statistical purposes and appropriate measures to
safeguard the rights and freedoms of the data subject and for ensuring
statistical confidentiality. Statistical purposes mean any operation of
collection and the processing of personal data necessary for statistical
surveys or for the production of statistical results. Those statistical
results may further be used for different purposes, including a
scientific research purpose. The statistical purpose implies that the
result of processing for statistical purposes is not personal data, but
aggregate data, and that this result or the personal data are not used
in support of measures or decisions regarding any particular natural
person."
Note that this specifically mentions processing with the result of
aggregate non-personal data.
J
