[eix-wg] RIPE 53 EIX-WG Draft Minutes

Hi All,

Wasn't present at the meeting, but happen to know a bit about the subject
of data-retention. Standard disclaimers apply: This is my personal
opinion, not my employers etc.

(SNIP)

>
> Kurtis Lindqvist (NETNOD) referred to data protection law, and advised
> that
> if the data is logged then it must be kept because you may be asked to
> hand
> it out. Elisa answered that data which is decoded (such as mac addresses)
> is kept, as well as the graphs so that the members can see their
> information. The rest of the sFlow datagram is not decoded by the software
> so there is nothing to keep.

In principle the EU regulation the retention of data only applies to data
that is on the list. sFlow data and headerdata of IP-packets is not on the
list, so there is no necessity to retain it even if you log it. On top of
this, the Privacy directives do apply, so data that is not on the list
must be deleted when not used anymore for business purposes. Now the
dataretention directive is the bottom limit and countries are allowed to
do more, so always check with your local implementation of the Data
Retention directive.

Greetings,

Rudolf