Hi Hank As they said in the legal presentation at RIPE 76, GDPR considerations are not finished, they are only just starting. A data controller is required to review if the personal data they hold is justified. I don't think the purpose of the RIPE Database can justify 2 million+ PERSON objects or holding personal data when a corporate role is all that is needed. cheersdenisco-chair DB-WG From: Hank Nussbacher via db-wg <db-wg@ripe.net> To: db-wg@ripe.net Sent: Thursday, 20 September 2018, 14:28 Subject: Re: [db-wg] PERSON objects in the RIPE Database On 20/09/2018 15:04, denis walker via db-wg wrote: Colleagues, The purpose in the Terms and Conditions may define a reason for holding contact information, but it doesn't justify this level of personal data being held in the database. Perhaps it's time to review what is meant by 'contact information'. What is really needed to satisfy this purpose? For example, why do we need an address for a technical contact who may need to be contacted in the event of an operational issue? No one is going to go to that address or post a letter. As always your thoughts and opinions are welcome... cheers denis co-chair DB WG I think HOHO-RIPE would tend to disagree. -Hank