Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You are probably joking, but the GDPR (and also the 'right to be forgotten') is not and has never been about the actual memories of a natural person. You diary (if you have one) is also not included in its scope.

You can remember whatever you want, about anyone or anything.



What part of the GDPR specifically addresses that?


No part of the GDPR specifically allows you to remember things, but Article 2 (which limits the scope of the law to data processed as part of a filing system) does except processing for purely personal activities in 2(2)(c).

https://gdpr-info.eu/art-2-gdpr/


Thanks! 2.2:

"This Regulation does not apply to the processing of personal data:

* "in the course of an activity which falls outside the scope of Union law;

* "by the Member States when carrying out activities which fall within the scope of Chapter 2 of Title V of the TEU;

* "by a natural person in the course of a purely personal or household activity;

* "by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security."


So if you're a natural person working in a store you don't fall under this exception.

I thought the GDPR sign at the butcher shop was a joke?


I'm not sure exactly what GDPR means for the people whose job involves processing data, but I would think that independent of whatever rules apply to the employer as a data controller/processor, 2(2)(c) would except the employee's memory of what they did.


The part that says you have to be an entity (data controller or data processors) that matches a specific definition, not merely a person living their life.


Is a "data controller or data processor" well defined in the law? What in any way could somebody ever twist the wording to include a person living their life?

What if this person had a hobby of simply collecting and cataloging information bout people they come in contact with?


>What if this person had a hobby of simply collecting and cataloging information bout people they come in contact with?

Then they are a data controller.

"A data controller is the individual or the legal person who controls and is responsible for the keeping and use of personal information on computer or in structured manual files.

(...)

In essence, you are a data controller if you can answer YES to the following question: Do you keep or process any information about living people?"

https://www.dataprotection.ie/docs/Are-you-a-Data-Controller...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: