> I've just made a unique ID for you, it's XYZUser. This is unique to you, and I'm storing this on my computer indefinitely.

I was under the impression that individuals keeping notes for non-commercial purposes is not governed by the GDPR.

If it's not exposed to the internet no problem. Not true unfortunately under the GDPR nor it's predecessor, if the notes are publicly available:

Bodil Lindquist v Åklagarkammaren (2003) Mrs. Lindquist (whose purposes were mostly charitable and religious) published on a private home page personal data about her colleagues, including telephone numbers and information about a coworker’s injured foot and medical leave. This case raised the question if a private home page accessible to only those who have the address is permitted under one of the exclusions (household activity). The European Court of Justice ruled that it is not.

I'm not sure why you reposted this, because what you're describing isn't something purely for household use.

https://gdpr-info.eu/recitals/no-18/

> This Regulation does not apply to the processing of personal data by a natural person in the course of a purely personal or household activity and thus with no connection to a professional or commercial activity. 2Personal or household activities could include correspondence and the holding of addresses, or social networking and online activity undertaken within the context of such activities. 3However, this Regulation applies to controllers or processors which provide the means for processing personal data for such personal or household activities.

>> not sure why you reposted this Probably an edit issue

The case is the precedent for the GDPR recital. Both of you are correct.

Not true unfortunately under the GDPR nor it's predecessor, if the notes are publicly available:

Bodil Lindquist v Åklagarkammaren (2003) Mrs. Lindquist (whose purposes were mostly charitable and religious) published on a private home page personal data about her colleagues, including telephone numbers and information about a coworker’s injured foot and medical leave. This case raised the question if a private home page accessible to only those who have the address is permitted under one of the exclusions (household activity). The European Court of Justice ruled that it is not.

A "private home page accessible to only those who have the address" is a public page.

That's not a private note, and I'd be livid if somebody was posting my contact and medical details online. I see no problem with this ruling, nor do I see it as evidence contrary to the idea that one may keep private notes.

That's what the user wrote: It's only a problem if the notes are public.

In response to a comment about keeping notes, which any reasonable person would interpret as meaning private notes.

What got my goat, though, wasn't the mere, if silly, clarification that notes are only protected if they're private. It's the phrasing of the quote to suggest that somehow these notes should have been considered private because the publisher didn't intend on anyone reading them (despite publishing them such that they could).

The quote is from an IAPP document, which quoted the courts wording. Source IAPP CIPP/E training manual, which I'm looking at right now.

What court wording are you referencing? The judgment says "private home page which is none the less accessible to anyone who knows its address", a very different turn of phrase.

Here you go: https://imgur.com/a/OGbjjQ0

I meant do you have a source for the court notes where they said that. It doesn't sound like a quote to me, it sounds like a precis.

In fact it sounds like a precis of the quote I provided, but I could also imagine the defendant's lawyer saying it in the more loaded way presented here.

Do you also store all of their email, searches, and websites they visit attached to that id?