Hello Konstantin, On Wed, Jun 14, 2023 at 02:42:15PM -0400, Konstantin Ryabitsev wrote: > We've had a few requests to mirror public-inbox archives that originate on > other systems so they can also be searchable and viewable via lore.kernel.org. > I've been dragging my feet on these requests, because they are a potential > liability in terms of GDPR compliance.
What is the relevant GDPR liability here? I assume someone who sent a mail to (say) [email protected] can request that you remove your copy of that mail?! > If we are merely mirroring the archive from some other location, then there > should be a clear indication of the origin of the data and contact information > of the maintainer of the remote archive where someone could send requests for > any data removal. It's best if this is visible both via the web view and in > raw messages retrieved via our service, e.g. via an "X-Archive-Origin:" header > or something similar. If my assumption above is the relevant issue, I wonder how an X-Archive-Origin header helps you. If you are sued/requested to remove that person's private data (and the claim is only directed to you (i.e. for lore.kernel.org) but not to Pengutronix (i.e. for lore.barebox.org) because their are in different jurisdictions) do you expect to be able to weasel out of the request by pointing to us? INAL, but that doesn't match my understanding of how things work. I would expect that you would have to care for your copy and Pengutronix for theirs. So I think what is needed here is that you can drop a mail from your copy of the archive even if the origin doesn't necessarily drops it. (I wonder what should be the effect on lore.kernel.org if lore.barebox.org removes a mail. Should it disappear from the former, too?) > CC'ing the folks who have been dutifully asking me to mirror their lists on > lore, and who I'm sure are sick and tired of me not getting any movement on > this issue. Thanks for bringing your issue forward, I hope that helps to get us nearer to have a barebox archive (and a few more) on lore.kernel.org. Best regards Uwe -- Pengutronix e.K. | Uwe Kleine-König | Industrial Linux Solutions | https://www.pengutronix.de/ |
signature.asc
Description: PGP signature
