Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Hideki Yamane
On Fri, 1 Apr 2022 22:16:55 +0300 Adrian Bunk wrote: > One option would be to outsource this work to our paid GDPR lawyer. Is there any option to cooperate with other FLOSS organizations? They would have the same issue and we may be able to share it and costs ;) -- Hideki Yamane

DPL voting period

2022-04-01 Thread Kurt Roeckx
Hi, The voting period should have be open by now. It will be delayed by 1 day. Kurt

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Sam Hartman
> "Adrian" == Adrian Bunk writes: Adrian> Your "services" approach does not work for the non-trivial Adrian> cases where Debian might be a (joint) controller of personal Adrian> data. Adrian> The Debian Community Team promises confidentiality regarding Adrian> personal

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 09:18:53PM +0200, Tollef Fog Heen wrote: > ]] Adrian Bunk > > > Who will fulfill the request within the legal limit of one month if > > a person sends an email to data-protect...@debian.org asking whether > > Debian is a (joint) controller of any data about this person,

Re: General resolution: Condemn Russian invasion of the Ukraine

2022-04-01 Thread Tiago Bortoletto Vaz
On Fri, Apr 01, 2022 at 07:22:32PM +, Bill Allombert wrote: > On Thu, Mar 31, 2022 at 12:31:18PM +0200, Julian Andres Klode wrote: > > Under 4.1.5 of the Constitution, the developers by way of GR are the > > body who has the power to issue nontechnical statements. > > > > This is a proposal

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Jonathan Carter
On 2022/04/01 20:28, Adrian Bunk wrote: Would you commit to something more specific, like that our Data Protection team will reply to debian-project within 3 months discussing all issues mentioned in the discussion at [1] so far, and with their reply having been proof-read by our GDPR lawyer?

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 08:46:42PM +0200, Tollef Fog Heen wrote: > ]] Adrian Bunk > > > Would you commit to something more specific, like that our Data > > Protection team will reply to debian-project within 3 months discussing > > all issues mentioned in the discussion at [1] so far, and with

Re: General resolution: Condemn Russian invasion of the Ukraine

2022-04-01 Thread Bill Allombert
On Thu, Mar 31, 2022 at 12:31:18PM +0200, Julian Andres Klode wrote: > Under 4.1.5 of the Constitution, the developers by way of GR are the > body who has the power to issue nontechnical statements. > > This is a proposal for Debian to issue a statement on an > issue of the day as given as an

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 07:40:02PM +0200, Tollef Fog Heen wrote: >... > This isn't the role of the data protection team, though, any more than > owner@bugs is responsible for fixing all the bugs in all the packages. > I'm quite happy to act as a redirector (as per the first part of the >

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Tollef Fog Heen
]] Adrian Bunk > Who will fulfill the request within the legal limit of one month if > a person sends an email to data-protect...@debian.org asking whether > Debian is a (joint) controller of any data about this person, and > if yes requests a copy of all data? To make this easier for services

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Jonathan McDowell
On Fri, Apr 01, 2022 at 09:28:53PM +0300, Adrian Bunk wrote: > Would you commit to something more specific, like that our Data > Protection team will reply to debian-project within 3 months discussing > all issues mentioned in the discussion at [1] so far, and with their > reply having been

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 07:02:15PM +0200, Jonathan Carter wrote: > Hi Adrian Hi Jonathan, >... > I'm not sure bringing in the lawyer as a first step is optimal, they are > expensive and will probably tell us a lot of things we already know. IMHO > it's better to do some initial groundwork,

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Tollef Fog Heen
]] Adrian Bunk > Would you commit to something more specific, like that our Data > Protection team will reply to debian-project within 3 months discussing > all issues mentioned in the discussion at [1] so far, and with their > reply having been proof-read by our GDPR lawyer? I don't think

Re: To all candidates: Debian and people with disabilities

2022-04-01 Thread Devin Prater
Gas is rather expensive these days. :D How would you propose we improve the emotional response? I've written plenty of blog posts on write.as/devinprater (some on other operating systems but a good bit about Linux). I'm not very good at making videos, but I can write and edit. Devin Prater

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Tollef Fog Heen
]] Jonathan Carter > So, I would appreciate it if the data protection team could look into > all of the issues we know of in Debian, but I'd also like there to be > a process where people can file issues with the data protection > team. I'll admit I had to search a bit to find the

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Jonathan Carter
Hi Adrian (I'm including the data-protection team, perhaps they can expand on your question or comment on my feedback) On 2022/03/31 22:08, Adrian Bunk wrote: The discussion starting in [1] is about privacy in Debian with a focus on the GDPR of the European Union. It started with the GDPR,

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Hideki Yamane
Hi, On Thu, 31 Mar 2022 23:08:41 +0300 Adrian Bunk wrote: > If elected, will you ask our Data Protection team and our GDPR lawyer to > jointly do a review of all handling of personal data in Debian regarding > GDPR compliance, Yes. > and make the results of the review available to all >

Re: Questions about Debian derivatives

2022-04-01 Thread Hideki Yamane
Hi, On Sun, 27 Mar 2022 11:53:28 +0800 Paul Wise wrote: > What do you think of Debian's current relationship with derivatives? > What would you like to change about our relationships? > What do you feel Debian's current approach to derivatives is? > What would you like to change about that

Re: General resolution: Condemn Russian invasion of the Ukraine

2022-04-01 Thread Philip Hands
Julian Andres Klode writes: > On Thu, Mar 31, 2022 at 03:46:46PM +, Andrew M.A. Cater wrote: >> On Thu, Mar 31, 2022 at 04:17:42PM +0300, Adrian Bunk wrote: >> > On Thu, Mar 31, 2022 at 12:31:18PM +0200, Julian Andres Klode wrote: >> > > Under 4.1.5 of the Constitution, the developers by way

Re: General resolution: Condemn Russian invasion of the Ukraine

2022-04-01 Thread Hideki Yamane
Hi, On Thu, 31 Mar 2022 12:31:18 +0200 Julian Andres Klode wrote: > Under 4.1.5 of the Constitution, the developers by way of GR are the > body who has the power to issue nontechnical statements. I disagree with it. I want to define the Debian Project as people who do Free and Open Source

Re: Question to all candidates: rotation on positions of power

2022-04-01 Thread Hideki Yamane
Hi Charles, On Wed, 23 Mar 2022 21:51:44 +0900 Charles Plessy wrote: > I expect a term limit to increase rotation on the positions of power, > with the following benefits: > > - reduce the risk of burn-out of the delegates, > > - motivate fresh people to have the ambition to serve in these >

Re: To all candidates: Debian and people with disabilities

2022-04-01 Thread Hideki Yamane
Hi, On Mon, 21 Mar 2022 23:37:03 +0100 Jean-Philippe MENGUAL wrote: > I dont think DPL can influence this, indeed. DPL can influence it, IMHO. But, of course cannot force it. Just point "the direction" and show the idea behind it and discuss - that's what I want to do. > Difficult