Data Protection team delegation
-----BEGIN PGP SIGNED MESSAGE-----
In light of the recent introduction of the EU GDPR  I am announcing the
creation of the Debian Data Protection team. As outlined in the official
delegation, the two main roles for the team are to:
* Provide a single contact point for external queries about data the
Project may hold about an individual.
* Act as an "advice service" for members of the Project who are involved
in running systems within Debian that may hold personal information
If you believe you can help out, please do get in contact via the email
address listed in "Contact" below. More general discussion regarding the
GDPR and related topics should be redirected to the "gpdr-discuss" mailing
I hereby appoint the following as members of the Debian Data Protection
- Jonathan McDowell (noodles)
- Tollef Fog Heen (tfheen)
This is the first delegation of this team. The delegation is not time-
limited; it will be effective until further changes by present or future
How we handle personal information is something the entire project needs to
be aware of. This team provides a centralised point for both external and
internal queries to ensure Debian takes appropriate care when dealing with
- Single contact point for external queries about data the Project may
It is accepted that Debian is a large and complex project especially
when viewed from the outside. Services under the debian.org
infrastructure are often operated by different project members with no
consistent method of reaching them. The Data Protection team therefore
provides a single point of contact for outside parties who can then
redirect queries to the appropriate team or teams.
- Advice service for project members.
Data protection is an issue all service owners need to be concerned
with. The Debian Data Protection team will provide guidance to Project
members about how to apply appropriate data protection principles to
their service such as data minimisation, appropriate retention policies
and dealing with deletion requests, etc.
The team can be contacted at email@example.com.
[ 0] https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
[ 1] https://www.earth.li/pipermail/gdpr-discuss/
: :' : Chris Lamb, Debian Project Leader
`. `'` firstname.lastname@example.org / chris-lamb.co.uk
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----