[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Question to all candidates: GDPR compliance review

On Fri, Apr 01, 2022 at 07:40:02PM +0200, Tollef Fog Heen wrote:
> This isn't the role of the data protection team, though, any more than
> owner@bugs is responsible for fixing all the bugs in all the packages.
> I'm quite happy to act as a redirector (as per the first part of the
> delegation) as well as advising service owners.  I have below-zero
> interest in auditing all our services and tracking everything relevant
> to data privacy throughout Debian.

Who will fulfill the request within the legal limit of one month if
a person sends an email to data-protection@debian.org asking whether
Debian is a (joint) controller of any data about this person, and
if yes requests a copy of all data?

If there is no reply within one month, the person can request an order 
from the local supervisory authority (e.g. [1] is the online form for
such requests in my country of residence).

> Cheers,


[1] https://tietosuoja.fi/en/find-out-whether-the-data-protection-ombudsman-can-help-you-rights

Reply to: