On Wed, 27 Feb 2019, Kai 'wusel' Siering wrote:
Am 26.02.2019 um 23:13 schrieb Cynthia Revström:
I have also been informed that this might be a rather unique case in regards to
having multiple physical locations requiring PI space.
It's not ? been there myself, and got really annoyed by the way the NCC
entered spanish-inquisition-mode (like asking for physical location of
DCs used, IMHO NOTB, and upstream mail contacts, again NOTB). That was
pre-GDPR, these days I'd follow up with "provide legal statement under
GDPR that allows you to ask this question, and process any answer".
Hrmpft.
Hi,
I fail to understand how a DC location could in any way be related to
a GDPR violation.
I also don't understand how asking for upstream mail contacts (i.e.
professional ones, that any ASN should in theory have published,
role or individual shouldn't make a difference) can violate GDPR.
I guess "purpose" for asking is quite easy to understand -- checking if
an upstream really exists at that point in time, which may be part of the
process.
Cheers,
Carlos
-kai
