Denis and all,
At 2017-06-15 11:26:15 +0000
denis walker <
ripedenis@yahoo.co.uk> wrote:
> Thanks for the update but it is still not acceptable. Surveymonkey is
> for cheap, diy surveys. The RIPE NCC sets up and operates the survey.
> That is simply NOT acceptable with such sensitive personal data.
I think it's fine.
> First of all you have the possibility of user error in configuration
> and NOT turn off IP address collection. I won't accept the argument
> that "this won't happen" or "we will be very careful". I have been in
> this industry for a long time. Even the most obvious and simple
> configurations are set wrongly at times.
This is not set by each user, but by the survey creator. I think it's a
good idea to require double-checking this is done correctly before
opening registration. (Honestly I find it weird that it's not the
default, but I guess people love data...)
> Secondly you have the option to look at individual results from
> survey users. These include a very precise timestamp. That can be
> correlated with the registration data and you can identify
> individuals.
This is a good point. Maybe we can look to see if there is a way to
disable this level of tracking? Alternately indeed some other survey
company can be used.
> Stop trying to do this on the cheap. If you want to collect such
> highly sensitive personal data, contract a third party company to
> operate a survey for you and send a report back to the RIPE NCC of
> the anonymous data collected. Something like you do for a member or
> staff survey. Yes it costs money to do that, but it is the only
> acceptable way forward.
I disagree. I think this is a reasonable approach.
> You are asking a group of mostly technical people to provide this
> sensitive personal data. They know how software works and how data is
> stored and handled. I doubt anyone from Russia and it's neighbours,
> the middle east and parts of Africa will do anything other than
> respond with their biological gender. It is too risky to do anything
> else, so some will lie. Your results will be meaningless.
Any self-reported data has limitations. We know going in that this
isn't going to be something we can compare with previous or past data
sets, but as I said when I supported this general approach, I think
that some data is better than no data.
Cheers,
--
Shane