News for hackers. Stuff that matters.
Re:Facebook page unpublished with no warning by wizzwizz4 on Friday January 28, 2022 @09:04PM (#30123042)
> Absolutely be collecting email addresses and general contact info (with their consent of course) of your fans or page participants

It's not hard, or expensive. Simply get consent. (Of course, you won't get much personal information on people that way, but that's how it be sometimes.)

Here's an example of how you could do it:

> Hello! I'm setting up a mailing list. If you're interested in receiving occasional updates about what's happening in this part of the community, please put your email address in this form: https://thecommunity.example.eu.org./subscribe

> I'll send you a verification email so nobody else can sign you up. There's also a link there to remove yourself from the list, and you can email [email protected]. any time to remove yourself from the list. (I'll send you a confirmation email to let you know you've been removed from the list.)

> If you want to unsubscribe, please just unsubscribe. If you mark the emails as spam, it might send other people's copies to their spam, too, and it might be months before anybody notices. And if you have any feedback, do let me know.

Re:Facebook page unpublished with no warning by erehweb on Friday January 28, 2022 @09:52PM (#30123317)
Large-scale data processing is considered high risk and requires appointing a data processing officer, according to https://www.osano.com/articles/gdpr-compliance-regulations. How large is large scale? Depends on the country - according to this link, the Czech Republic says 10,000 is enough https://iapp.org/news/a/on-large-scale-data-processing-and-g...
Re:Facebook page unpublished with no warning by philistine on Friday January 28, 2022 @09:58PM (#30123346)
That sounds like a job for the drummer.
Re:Facebook page unpublished with no warning by wiml on Friday January 28, 2022 @11:15PM (#30123726)
Our last data protection officer spontaneously combusted...
Re:Facebook page unpublished with no warning by waterhouse on Saturday January 29, 2022 @04:58PM (#30130958)
Hitting the send button really really fast. The skills carry over.
Re:Facebook page unpublished with no warning by Zababa on Friday January 28, 2022 @10:28PM (#30123501)
Of course a company trying to sell you services to help compliance is going to say that this business is "high risk".
Re:Facebook page unpublished with no warning by erehweb on Friday January 28, 2022 @11:32PM (#30123806)
High-risk is a term used in the GDPR itself - see e.g. https://ec.europa.eu/newsroom/article29/items/611236 from the European Commission
Re:Facebook page unpublished with no warning by Graffur on Saturday January 29, 2022 @04:36AM (#30125060)
Your source has this:

" Example: An online magazine using a mailing list to send a generic daily digest to its subscribers.

Possible Relevant criteria: Data processed on a large scale.

DPIA likely to be required?: No "

Re:Facebook page unpublished with no warning by isbvhodnvemrwvn on Saturday January 29, 2022 @07:01AM (#30125660)
Generic daily digest where you are aware of this data being collected due to it being used constantly, and giving you some value out of this, vs long-term storage of data that's not used and where the value is questionable.
Re:Facebook page unpublished with no warning by ThePowerOfFuet on Sunday January 30, 2022 @03:01PM (#30140547)
This hypothetical situation doesn't require the appointment of a DPO.