General Category > General Discussion
LRD and GDPR
The Bowler Hatted Turner:
My local club are having a live remote demonstration tomorrow evening, the host/demonstrator has asked for a list of those likely to take part in order that no unauthorised people manage to gatecrash. I think this is a reasonable request but where do we stand regards GDPR because we are not supposed to give out any personal information?
Twisted Trees:
A list of JUST names should be OK :-
Quote from https://www.itgovernance.eu/blog/en/the-gdpr-what-exactly-is-personal-data
"Names aren’t always considered personal data
You might think that someone’s name is as clear an example of personal data as it gets; it is literally what defines you as you. But it’s not always that simple, as the UK’s Information Commissioner’s Office explains:
“By itself the name John Smith may not always be personal data because there are many individuals with that name."
Paul Hannaby:
But if that John Smith was known to be the one in Trowbridge due to the connection with the club, then it could become personal data...
The best approach is to do whatever your club's privacy policy says you will do.
The Bowler Hatted Turner:
Yeah we don't have a John Smith so that is OK.
Twisted Trees:
Problem solved ;) just make sure that if John Smith wants to join he uses a fake name
Navigation
[0] Message Index
[#] Next page
Go to full version