[anti-abuse-wg] Spam FAQs need revision, was 2011-06 New Policy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 16/12/2011 21:32, russ at consumer.net wrote:
> I received a few private e-mails from people on this list claiming
> i am all wrong about IP addresses being classified as personal
> information. I did not make this ruling, it was a 2008 proclamation
> by the EU Data Commission.

The law is meant to be interpreted with a degree of subtlety. ISPs and
mail providers are generally allowed to process IP addresses if it's
in their legitimate interest (we'd not get very far otherwise).
Dealing with spam or running an incident response function is thought
to lie within this realm.

The risk of being able to identify an individual starting with an IP
address listed in a black list is very small, and the impact very
small, but the benefits from publishing them should be very clear.

If you'd like to learn more, our legal and regulatory officer wrote a
paper on these issues at
http://www.terena.org/activities/tf-csirt/publications/data-protection-v2.pdf

Regards,

James

- -- 
James Davis                0300 999 2340 (+44 1235 822340)
Senior CSIRT Member	
Lumen House, Library Avenue, Didcot, Oxfordshire, OX11 0SG
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iF4EAREIAAYFAk7u8ycACgkQjsS2Y6D6yLxbawD+OAUlE2LW/AWUSz3ivT69AJ7H
AsNLcxv+T/ZM2L7MkssA/ibp1oqn3+QhyEM/zn3h29ZGpHTF/Zpj/8APaidMoNQN
=Xok5
-----END PGP SIGNATURE-----

JANET(UK) is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024 
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG