[anti-abuse-wg] GDPR - positive effects on email abuse

This is another argument often raised, yet it is missing the point of 
the legality of these registers. Yes, there are certain public or 
non-public registers like the land register (public) or the car 
registration register (non-public), but each of these are mandated by 
law. If you buy land, there is a legal requirement to get yourself 
registered. This legal basis is sufficient grounds for data processing 
under the GDPR under Art 6 I c) ("processing is necessary for compliance 
with a legal obligation to which the controller is subject").

But that is exactly the point: No such law exists for IP adresses or 
whois, hence the logic of having these registeres cannot be transferred 
to these services. Now, some countries have such laws and ccTLD 
registries will continue to legally publish whois details for their TLD 
registrations. But most do not, and if they do, these laws are 
specifically tailored to their own TLD.

Volker

Am 29.05.2018 um 16:42 schrieb Ángel González Berdasco:
> Volker Greimann wrote:
>> Hi Simon,
>>
>> that is a common misconception, but sadly untrue.
>>
>>> As things stand at the moment, the interpretations of GDPR and subsequent actions of some large organisations make it likely that fraud and other types of malpractice, largely aimed at individual users, will increase.
>> On the other hand, the amount of spam and abuse directed at new
>> registrant will be greatly reduced. Balance will be the result.
>>> The stated position "that tool was illegal to begin with as it violated the rights to privacy of millions of domain owners” is, at best, misleading. Assuming the “tool” being referred to is WHIOS, registrants of domains needed to provide information as part of their contract with the registrar. A contractual requirement. Perfectly OK pre GDPR, perfectly OK post GDPR.
>> Sadly untrue, since consent to processing of data that is not strictly
>> necessary for the performance of the contract post GDPR must be freely
>> given. If the service is withheld unless consent is provided, that
>> consent is invalid.
>> Even before GDPR, the consent for whois was iffy as best.
> Don't you have real estate registration in your country that is publicly
> accessible? If so, do you think it should now be banned under GDPR (if
> in EU)?
>
> I see your point, but it is not *that* clear.
>
> Best regards
>
>

-- 
Bei weiteren Fragen stehen wir Ihnen gerne zur Verfügung.

Mit freundlichen Grüßen,

Volker A. Greimann
- Rechtsabteilung -

Key-Systems GmbH
Im Oberen Werk 1
66386 St. Ingbert
Tel.: +49 (0) 6894 - 9396 901
Fax.: +49 (0) 6894 - 9396 851
Email: vgreimann at key-systems.net

Web: www.key-systems.net / www.RRPproxy.net
www.domaindiscount24.com / www.BrandShelter.com

Folgen Sie uns bei Twitter oder werden Sie unser Fan bei Facebook:
www.facebook.com/KeySystems
www.twitter.com/key_systems

Geschäftsführer: Alexander Siffrin
Handelsregister Nr.: HR B 18835 - Saarbruecken
Umsatzsteuer ID.: DE211006534

Member of the KEYDRIVE GROUP
www.keydrive.lu

Der Inhalt dieser Nachricht ist vertraulich und nur für den angegebenen Empfänger bestimmt. Jede Form der Kenntnisgabe, Veröffentlichung oder Weitergabe an Dritte durch den Empfänger ist unzulässig. Sollte diese Nachricht nicht für Sie bestimmt sein, so bitten wir Sie, sich mit uns per E-Mail oder telefonisch in Verbindung zu setzen.

--------------------------------------------

Should you have any further questions, please do not hesitate to contact us.

Best regards,

Volker A. Greimann
- legal department -

Key-Systems GmbH
Im Oberen Werk 1
66386 St. Ingbert
Tel.: +49 (0) 6894 - 9396 901
Fax.: +49 (0) 6894 - 9396 851
Email: vgreimann at key-systems.net

Web: www.key-systems.net / www.RRPproxy.net
www.domaindiscount24.com / www.BrandShelter.com

Follow us on Twitter or join our fan community on Facebook and stay updated:
www.facebook.com/KeySystems
www.twitter.com/key_systems

CEO: Alexander Siffrin
Registration No.: HR B 18835 - Saarbruecken
V.A.T. ID.: DE211006534

Member of the KEYDRIVE GROUP
www.keydrive.lu

This e-mail and its attachments is intended only for the person to whom it is addressed. Furthermore it is not permitted to publish any content of this email. You must not use, disclose, copy, print or rely on this e-mail. If an addressing or transmission error has misdirected this e-mail, kindly notify the author by replying to this e-mail or contacting us by telephone.