[anti-abuse-wg] GDPR - positive effects on email abuse

Volker Greimann wrote: 
> Hi Simon,
> 
> that is a common misconception, but sadly untrue.
> 
> > As things stand at the moment, the interpretations of GDPR and subsequent actions of some large organisations make it likely that fraud and other types of malpractice, largely aimed at individual users, will increase.
> On the other hand, the amount of spam and abuse directed at new 
> registrant will be greatly reduced. Balance will be the result.
> > The stated position "that tool was illegal to begin with as it violated the rights to privacy of millions of domain owners” is, at best, misleading. Assuming the “tool” being referred to is WHIOS, registrants of domains needed to provide information as part of their contract with the registrar. A contractual requirement. Perfectly OK pre GDPR, perfectly OK post GDPR.
> Sadly untrue, since consent to processing of data that is not strictly 
> necessary for the performance of the contract post GDPR must be freely 
> given. If the service is withheld unless consent is provided, that 
> consent is invalid.
> Even before GDPR, the consent for whois was iffy as best.

Don't you have real estate registration in your country that is publicly
accessible? If so, do you think it should now be banned under GDPR (if
in EU)?

I see your point, but it is not *that* clear.

Best regards


-- 
CERTSI (CERT de Seguridad e Industria) - Spanish Security and Industry Incident Response Team
https://www.certsi.es/

PGP Keys: https://www.certsi.es/en/what-is-certsi/pgp-public-keys

------------------------------------------------------------------------------

CERTSI (CERT de Seguridad e Industria) Spanish Security and Industry
Incident Response Team operates under the auspices of the Ministry of
Energy, Tourism and Digital Agenda through the State Secretariat for
Information Society and Digital Agenda, and the Ministry of Interior
through the Security State Secretariat of the Spanish government as a
national CERT.
Our main role is detection, coordination and response of security
incidents that take place on Spanish CI (Critical Infrastructure),
Research and Academic Network (RedIRIS), enterprises and/or citizens.
Also, we act as Spanish national CERT in the role of coordination with
other security teams.

------------------------------------------------------------------------------

Disclaimer:
This message, including any attachments, may contain confidential
information, within the framework of the corporate Security Management
System.
If you are not the intended recipient, please notify the sender and
delete this message without forwarding or retaining a copy, since any
unauthorized use is strictly prohibited by law.

------------------------------------------------------------------------------