The RIPE Data Protection Task Force (DPTF) was established at RIPE 52 in April 2006 when the Database Working Group identified a need to update the RIPE Database in compliance with Dutch legislation. It was decided that the task force would be disbanded when the discussed deliverables were completed.
The RIPE NCC operates the RIPE Database. The RIPE Database contains registration details of IP addresses and AS Numbers. It shows the organisations that hold the resources, where the allocations were made and contact details of those responsible for the networks. This information in the RIPE Database is publicly available
The RIPE NCC is an association registered in the Netherlands, so it must comply with the EU Data Protection Directive and the Dutch Data Protection Act. The RIPE NCC is considered to be the “data controller” under the terms of the Dutch Data Protection Act. The DPTF agreed to take all necessary steps to ensure that the RIPE NCC complies with the legislation.
The DPTF agreed on the following deliverables:
The DPTF met during the following RIPE Meetings:
The DPTF together with the RIPE NCC and input from the RIPE Community developed the procedures of the RIPE NCC to control personal data exposure and set up a legal framework for the use of personal data in accordance with the data protection regulations. In particular, the following actions were taken:
More information and analysis of the legal reasoning behind these actions is available in the following document:
The tasks for which the DPTF was established are completed and as a result the task force is closed. The RIPE NCC will continue to listen to what the community has to say, will keep monitoring legal framework changes and will react appropriately when necessary. Thank you to all DPTF participants and supporters.
Manfredo Miserocchi (Chair), János Zsakó, Wilfried Woeber, Peter Koch, Richard Cox, Elmar K. Bins and Larissa Yurkina.
Athina Fragkouli, Jochem de Ruig and Denis Walker from the RIPE NCC provided support to the DPTF.