Open-Sourcing our GDPR Compliance Preparation For Articles 30, 32, and 35

Re:Open-Sourcing our GDPR Compliance Preparation For Article... by dominotw on Saturday May 19, 2018 @04:49PM (#17109655)

> . While individually they would not be a problem, it’s the combination of these different parameters that allow you to narrow the pool so much it can reasonably assumed to be PII.

There are zipcodes in USA with only 1 person. So storing just zipcode would be ID information. Its an extereme example but how can machine check whats 'reasonable' in this case, go off of some census data for zipcode?

I wonder if there are any real world ( as opposed to things like ingame points) information that can be considered not PII .

[ Parent | on HN ]

Re:Open-Sourcing our GDPR Compliance Preparation For Article... by punnerud on Saturday May 19, 2018 @06:57PM (#17110176)

There is also the interpretation of when is it PD or AD. In Norway the ‘The Norwegian Data Protection Authority‘ states 4 or less is personal, no way to link to less than 5 is anonymous.

[ Parent | on HN ]