I referred to PII in inetnum objects descr: fields These fields are not protected by RIPE's privacy protection like contact or person inetnum: 91.114.x.y - 91.114.x.y netname: A1TA-AT descr: A1 Telekom Austria AG (originally my full name) descr: Arsenal Obj 24 (originally my street) descr: 1030 Vienna (originally my postal code) When you view the history of this object my PII (full name, street and postal code) is still visible in the description fields. Removing this PII information in the descr: field of the inetnum object can only be achieved by deleting the object, which removes the history as well. For this reason it would be beneficial if deleting an object also deletes its history. I apologize for not beeing clear enough. Rgds, MiKa On 2024-05-24 08:59, Michael Kafka via db-wg wrote:

Hi,

the deletion of an object together with it's history is the only way to remove PII from the RIPE database which is in conflict with GDPR. This PII is usually in comments and contains full name, often together with postal code, city, street name and sometimes with house number.

A choice "delete with history"/"delete and keep history" would serve both use cases.

Rgds, MiKa

On 2024-05-24 00:55, Yang Yu via db-wg wrote:

...

Hi,

According to https://apps.db.ripe.net/docs/Types-of-Queries/Historical-Queries/ , historical query doesn't return data on deleted objects. This behavior makes it difficult to distinguish whether a resource was squatted on / analyze history associated with abuse on the resource. And it is not consistent with other RIR's whowas behavior.

Currently on RIPE whowas UI unallocated and deleted objects look exactly the same. https://stat.ripe.net/widget/historical-whois#w.resource=as199256

Last time the discussion came up appears to be https://www.ripe.net/ripe/mail/archives/db-wg/2013-November/004195.html

Can history support for deleted objects get implemented?

Thanks.

Yang

-- NetCaT GmbH, Bennogasse 13/5, 1080 Wien FN 433437 h, Handelsgericht Wien, UID: ATU69635335 GF: Michael Kafka, Georg Kraus

Hi Ed, Thanks for the context. On Mon, May 27, 2024 at 9:21 AM Edward Shryane <eshryane@ripe.net> wrote:

Asking 2 questions for the DB-WG community:

(1) Is it still a requirement of the RIPE Database to provide historical information of resource holders?

I believe historical information is essential for ensuring the uniqueness of Internet number resource usage and facilitating coordination between network operators, e.g. identifying squatting on number resources, cleaning up IP reputation on previously allocated resources. Currently it is not possible to tell if a resource was allocated at a given point of time before the last deletion.

(2) Clearly define what is the requirement and what is in scope

ideally consistent with other RIRs, example whowas https://www.apnic.net/static/whowas-ui/#AS131474 * full history on allocation related updates (previous holders of the resource at any point of time) * resource objects and organisation objects associated with the resource * mntner / person objects could be helpful to identify malicious updates, but less important Yang