= Сообщение: 6406 из 12550 ====================================== ENET.SYSOP = От : Ward Dossche 2:292/854 22 May 18 23:56:34 Кому : All 22 May 18 23:56:34 Тема : GDPR on May 25th 2018 FGHI : area://ENET.SYSOP?msgid=2:292/854+18241744 = Кодировка сообщения определена как: ASCII ================================== Ответ: area://ENET.SYSOP?msgid=2:240/1661+5ae9a1be Ответ: area://ENET.SYSOP?msgid=2:410/303+5b058ade Ответ: area://ENET.SYSOP?msgid=2:280/1208@FidoNet+480f08aa ============================================================================== The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
It was adopted on 14 April 2016, and after a two-year transition period, becomes enforceable on 25 May 2018. Because the GDPR is a regulation, not a directive, it does not require national governments to pass any enabling legislation and is directly binding and applicable.
The Fidonet-regions concerned are:
R20 Sweden Norway Finland Denmark R24 Germany R25 UK Ireland R28 Netherlands R29 Belgium R30 Switzerland R31 Austria R33 Italy R34 Spain R42 Czech Republik Slovakia R48 Poland
Before any discussions will erupt among the self-appointed legal-specialists I'd like to point-out that Norway and Switzerland are EEA members and the UK, even after Brexit, most likely will retain EEA membership. The GDPR also applies to them.
How does this affect, or not, Fidonet?
I've been privy to a discussion among our German members and the heights and depths which the arguments reached. However, it is all real simple and straightforward.
After May 25, 2018 companies and organisations can only communicate with people who have given their explicit consent.
With a big "Thank you" to the late Helmut Hullen, Fidonet's status as a legitimate not-for-profit organisation has been established at a court of law in Belgium, the country of residence of the current ZC2.
Therefor we need to devote some attention to it.
Every sysop in the past has requested to be listed in the nodelist, otherwise he/she would not be a Fidonet sysop, so the permission of each individual sysop in regions within the European Union as well as the EEA has already been obtained.
As the Fidonet-organisation is non-commercial and does not compile, store nor process sensitive information, the bulk of the GDPR-regulation does not apply to us.
I know some of you have already wasted a lot of good breath on this subject but after checking with one of the MEPs behind this, also with a lawyer and the Belgian Privacy Commission, this really is all which needs to be said about GDPR in relation to Fidonet.
Non-compliance can be punished by law uniquely through a fine which is a percentage of the annual turn-over. As Fidonet has no turn-over, the discussion would be pretty moot, at least that's how it seems to me.
