We’ve talked about GDPR a few times over the last few months, but our focus has been mostly around the implications for domain name whois ie. the public directory associated with domain names. I’d love to say that we won’t be talking about that again in the future, but nothing could be further from the truth!
But, as I’ve said repeatedly in multiple fora, GDPR has to be viewed holistically. You need to look at how it impacts all facets and aspects of your business. Some things are fairly obvious, but others can take you by surprise when you try to do a data flow and mapping type exercise.
Next Monday evening EURALO is hosting a webinar to cover various aspects of GDPR with a close link to the internet, hosting and domain names.
The speakers will be:
- Pierre Bonis – AFNIC
- Athina Fragkouli – RIPE
- Michele Neylon – Blacknight Solutions Hosting, Colocation & Domains
- Thomas Rickert – eco Internet Industry Association
The moderator will be Olivier Crépin-Leblond
The mix of speakers is a good reflection of some of the diversity of organisations impacted by GDPR, so the panel includes a ccTLD, a regional registry, a hosting provider and registrar (that would be me!) and a lawyer speaking on behalf of a variety of other interests.
I’ll be speaking from the perspective of a business, employer, hosting provider, network operator and registrar in that order. Over the past few months we’ve been working behind the scenes on trying to address GDPR as best we can. That means dealing with it in three areas, broadly speaking:
- internally in relation to our own staff
- externally in relation to vendors and other third parties we deal with
- in relation to our clients
We’ve been working on documenting how we handle data and also who is responsible for what which I’ll speak to during the webinar. So, for example, if your data sits on a server (or service) that we run and manage we’d have responsibility for some aspects of it, but we can’t help if you insist on using a weak password or write your password on a post-it note and stick it to your computer.
Here is a draft overview of how we’ve mapped some of this:
Data Control Overview (Draft)
If you’re interested in joining the call here are the details:
Date and time: Monday, 19 February 2018 from 19:00 – 20:30 UTC.
Adobe Connect Room: https://participate.icann.org/euralo/
Dial in numbers are located here and the conference ID is 1638